Privacy Intern: GDPR & RoPA Documentation

Xpansiv%20; New York (NY); On-site; USD 28,000 - 48,000; Part time

Benefits offered by this job

Paid internship

Job summary

Xpansiv is seeking a Privacy Intern to support the Risk & Compliance Department in maturing our enterprise privacy program. The initial focus will be on refining GDPR privacy obligation matrices and documenting processing registers for the EU and globally.

If time permits, the intern will contribute to broader privacy program buildout activities and work with stakeholders across Legal, Security, Product, and operations.

Qualifications

• Currently pursuing undergraduate or graduate degree in law, privacy, or related field.
• Strong understanding of GDPR concepts and RoPA principles.
• Excellent written communication and documentation skills.

Responsibilities

• Support GDPR privacy obligation matrices with controls, owners, evidence, and documentation requirements.
• Review RoPA and processing register documentation for EU operations.
• Perform research on international privacy obligations and translate requirements into practical documents.
• Collaborate with internal stakeholders to collect purposes of processing, data categories, retention, transfers, processors/sub-processors, and security measures.
• Identify documentation gaps and propose governance process improvements.
• Assist in building privacy program materials (procedures, playbooks, trackers, audit-ready files).
• Maintain organized documentation with version control and traceability.

Skills

GDPR concepts

Documentation

Stakeholder coordination

Legal research

Education

Undergraduate or graduate degree in related field

Tools

OneTrust or similar

Job description

Xpansiv is seeking a Privacy Intern to support the Risk & Compliance Department in maturing our enterprise privacy program. The initial focus will be on refining GDPR privacy obligation matrices and documenting processing registers for the EU and globally.

If time permits, the intern will contribute to broader privacy program buildout activities and work with stakeholders across Legal, Security, Product, and operations.