Remote Privacy Analyst – Ad Tech & Compliance

Gannett; McLean (VA); On-site; USD 90,000 - 110,000; Full time

Job summary

USA Today Co. Privacy Office in the United States seeks a Privacy Analyst to support our privacy program, mitigate risk, and build trust with customers and consumers.

You will review ad tech architecture and data flows to identify privacy vulnerabilities and provide guidance to teams. You will assist incident response, maintain privacy content, manage OneTrust modules, and support data subject rights requests.

Qualifications

• Strong understanding of data protection laws (GDPR, CCPA/CPRA).
• Experience with privacy reviews (PIAs, audits, process evaluations).
• IAPP or ISO27001 certifications or ISACA Privacy Certifications are preferred.
• Familiarity with Privacy by Design principles and PETs.
• Bachelor's degree and 3–5 years in privacy compliance.

Responsibilities

• Conduct architecture reviews of the ad tech stack and provide privacy guidance to ad tech teams.
• Analyze system designs and data flows to identify privacy vulnerabilities.
• Support privacy incident response and breach-related activities.
• Assist in developing and maintaining privacy content for intranet.
• Support assessments of third‑party vendors for privacy compliance.
• Manage website cookie scanning and OneTrust privacy modules.
• Stay current with GDPR, CCPA/CPRA, HIPAA, and other applicable laws.
• Maintain records of data processing activities and DPIAs.
• Support responding to data subject rights requests.
• Manage program metrics and reporting.

Skills

Privacy laws knowledge

Risk assessment

Incident response

Privacy program management

Data subject rights

OneTrust

PIA reviews

PETs

Encryption

Anonymization

Differential privacy

Education

Bachelor's degree

IAPP CIPM/CIPP/CIPT

ISO27001

ISACA Privacy Certification

Tools

OneTrust

Job description

USA Today Co. Privacy Office in the United States seeks a Privacy Analyst to support our privacy program, mitigate risk, and build trust with customers and consumers.

You will review ad tech architecture and data flows to identify privacy vulnerabilities and provide guidance to teams. You will assist incident response, maintain privacy content, manage OneTrust modules, and support data subject rights requests.