Senior Business Analyst Data Privacy / GDPR & CCPA

Creative Solutions Services, LLC; Houston (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Creative Solutions Services, LLC is seeking a privacy compliance specialist to drive GDPR/CCPA initiatives, perform data mapping, assess privacy risks, and manage DSAR processes. You will work with Legal, Compliance, IT, Security and Business to implement RoPA, data classification and cross-border transfer controls.

The role requires strong stakeholder collaboration, experience with OneTrust and privacy policy documentation, and familiarity with BRD/FRD and user stories in an Agile setting.

Qualifications

• Experience with GDPR/CCPA regulatory frameworks.
• Data privacy knowledge across policies and controls.
• Ability to perform data mapping and data flow analysis.
• Experience with PIA/DPIA and privacy risk assessments.
• Familiarity with RoPA and DPIA documentation.
• Proficiency in data classification and PII identification.
• Experience handling DSAR processes and consent management.
• Background in third-party/privacy assessments and cross-border transfers.
• Knowledge of privacy policies and compliance documentation.
• Ability to gather business requirements and translate into BRD/FRD and user stories.
• Process mapping experience AS-IS / TO-BE and enabling UAT/test-case prep.
• Strong stakeholder management across Legal, Compliance, IT, Security and Business.
• Experience with Agile/Scrum using JIRA and Confluence.
• OneTrust experience strongly preferred.
• CIPP/US, CIPP/E, CIPM or similar certification preferred.

Responsibilities

• Lead GDPR/CCPA privacy compliance initiatives as a data protection specialist.
• Perform data mapping and data flow analyses to support privacy controls.
• Conduct PIA/DPIA and privacy risk assessments for projects.
• Maintain RoPA (Records of Processing Activities) and data classification.
• Identify and protect PII; support DSAR processes and consent management.
• Coordinate third‑party privacy assessments and cross-border data transfer considerations.
• Develop and update privacy policies, procedures, and documentation.
• Collaborate with Legal, Compliance, IT, Security and Business on privacy requirements.
• Gather business/functional requirements and translate into BRD/FRD and user stories.
• Map AS-IS / TO-BE processes; support UAT and test-case prep.
• Promote Agile practices; use JIRA/Confluence for backlog and docs.

Skills

GDPR & CPRA

Data privacy

Data mapping

DSAR processes

Privacy risk assessment

Stakeholder management

Agile/Scrum

Education

CIPP/US or CIPM preferred

Tools

JIRA

Confluence

OneTrust

Job description

• Strong understanding of GDPR and CCPA/CPRA
• Data privacy and data protection compliance
• Data mapping & data flow analysis
• PIA/DPIA and privacy risk assessments
• RoPA (Records of Processing Activities)
• Data classification and PII identification
• Data subject rights / DSAR processes
• Consent management
• Third-party/vendor privacy assessments
• Cross-border data transfers and TIA/SCC
• Privacy policies, procedures and compliance documentation
• Business & functional requirements gathering
• BRD/FRD, user stories and acceptance criteria
• Process mapping — AS-IS / TO-BE
• UAT and test-case preparation
• Stakeholder management across Legal, Compliance, IT, Security and Business
• Agile/Scrum, JIRA and Confluence
• OneTrust experience strongly preferred
• CIPP/US, CIPP/E, CIPM or similar certification preferred