Senior Privacy & Compliance Business Analyst

MHK Tech Inc.; Houston (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Creative Solutions Services, LLC is seeking a privacy compliance specialist to drive GDPR/CCPA initiatives, perform data mapping, assess privacy risks, and manage DSAR processes. You will work with Legal, Compliance, IT, Security and Business to implement RoPA, data classification and cross-border transfer controls.

The role requires strong stakeholder collaboration, experience with OneTrust and privacy policy documentation, and familiarity with BRD/FRD and user stories in an Agile setting.

Qualifications

• Experience with GDPR/CCPA regulatory frameworks.
• Data privacy knowledge across policies and controls.
• Ability to perform data mapping and data flow analysis.
• Experience with PIA/DPIA and privacy risk assessments.
• Familiarity with RoPA and DPIA documentation.
• Proficiency in data classification and PII identification.
• Experience handling DSAR processes and consent management.
• Background in third-party/privacy assessments and cross-border transfers.
• Knowledge of privacy policies and compliance documentation.
• Ability to gather business requirements and translate into BRD/FRD and user stories.
• Process mapping experience AS-IS / TO-BE and enabling UAT/test-case prep.
• Strong stakeholder management across Legal, Compliance, IT, Security and Business.
• Experience with Agile/Scrum using JIRA and Confluence.
• OneTrust experience strongly preferred.
• CIPP/US, CIPP/E, CIPM or similar certification preferred.

Responsibilities

• Lead GDPR/CCPA privacy compliance initiatives as a data protection specialist.
• Perform data mapping and data flow analyses to support privacy controls.
• Conduct PIA/DPIA and privacy risk assessments for projects.
• Maintain RoPA (Records of Processing Activities) and data classification.
• Identify and protect PII; support DSAR processes and consent management.
• Coordinate third‑party privacy assessments and cross-border data transfer considerations.
• Develop and update privacy policies, procedures, and documentation.
• Collaborate with Legal, Compliance, IT, Security and Business on privacy requirements.
• Gather business/functional requirements and translate into BRD/FRD and user stories.
• Map AS-IS / TO-BE processes; support UAT and test-case prep.
• Promote Agile practices; use JIRA/Confluence for backlog and docs.

Skills

GDPR & CPRA

Data privacy

Data mapping

DSAR processes

Privacy risk assessment

Stakeholder management

Agile/Scrum

Education

CIPP/US or CIPM preferred

Tools

JIRA

Confluence

OneTrust

Job description

Strong understanding of GDPR and CCPA/CPRA
Data privacy and data protection compliance
Data mapping & data flow analysis
PIA/DPIA and privacy risk assessments
RoPA (Records of Processing Activities)
Data classification and PII identification
Data subject rights / DSAR processes
Consent management
Third-party/vendor privacy assessments
Cross-border data transfers and TIA/SCC
Privacy policies, procedures and compliance documentation
Business & functional requirements gathering
BRD/FRD, user stories and acceptance criteria
Process mapping — AS-IS / TO-BE
UAT and test-case preparation
Stakeholder management across Legal, Compliance, IT, Security and Business
Agile/Scrum, JIRA and Confluence
OneTrust experience strongly preferred
CIPP/US, CIPP/E, CIPM or similar certification preferred