Senior Business Analyst – Data Privacy / GDPR & CCPA

MHK TECH INC; Houston (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

MHK TECH INC in Houston seeks a privacy professional to advance our data protection program, focusing on GDPR/CCPA compliance, data mapping, DPIA/PIA, and DSAR workflows across the organization.

You will collaborate with Legal, Compliance, IT and Security, helping shape privacy policies, risk assessments and vendor privacy reviews in support of regulatory obligations.

Qualifications

• Strong understanding of GDPR and CCPA/CPRA
• Data privacy and data protection compliance
• Data mapping & data flow analysis
• PIA/DPIA and privacy risk assessments
• RoPA (Records of Processing Activities)
• Data classification and PII identification
• Data subject rights / DSAR processes
• Consent management
• Third-party/privacy assessments
• Cross-border data transfers and TIA/SCC
• Privacy policies, procedures and compliance documentation
• Business & functional requirements gathering
• BRD/FRD, user stories and acceptance criteria
• Process mapping — AS-IS / TO-BE
• UAT and test-case preparation
• Stakeholder management across Legal, Compliance, IT, Security and Business
• Agile/Scrum, JIRA and Confluence
• OneTrust Experience Strongly Preferred
• CIPP/US, CIPP/E, CIPM or similar certification preferred

Skills

GDPR/CPRA

Data privacy

Data mapping

PIA/DPIA

RoPA

Data classification

DSAR

Consent management

Third-party privacy

Cross-border transfers

Privacy policies

BRD/FRD

Process mapping

UAT testing

Stakeholder mgmt

Agile/JIRA/Confluence

OneTrust

CIPP/US

CIPP/E

CIPM

Tools

JIRA

Confluence

Job description

• Strong understanding of GDPR and CCPA/CPRA
• Data privacy and data protection compliance
• Data mapping & data flow analysis
• PIA/DPIA and privacy risk assessments
• RoPA (Records of Processing Activities)
• Data classification and PII identification
• Data subject rights / DSAR processes
• Consent management
• Third-party/vendor privacy assessments
• Cross-border data transfers and TIA/SCC
• Privacy policies, procedures and compliance documentation
• Business & functional requirements gathering
• BRD/FRD, user stories and acceptance criteria
• Process mapping — AS-IS / TO-BE
• UAT and test-case preparation
• Stakeholder management across Legal, Compliance, IT, Security and Business
• Agile/Scrum, JIRA and Confluence
• OneTrust Experience Strongly Preferred
• CIPP/US, CIPP/E, CIPM or similar certification preferred