Privacy Analyst | Data Protection Officer

Employment Type: Full-Time

Level: Mid-Level to Senior

We are seeking a detail-oriented and compliance-focused Privacy Analyst | Data Protection Officer to support the organization’s privacy, data protection, and information governance programs. This role will help ensure that personal data is collected, processed, stored, shared, and retained appropriately while supporting privacy compliance, risk management, data governance, and employee awareness across the organization.

• Monitor and support the organization’s privacy and data protection program.
• Assess business processes involving the collection, use, storage, transfer, and disclosure of personal data.
• Conduct privacy impact assessments and data protection impact assessments where required.
• Identify privacy risks, control gaps, and potential areas of non-compliance.
• Develop and maintain privacy risk registers, assessment records, and remediation plans.
• Review privacy policies, procedures, standards, guidelines, and internal controls.
• Support compliance with applicable data protection and privacy laws and regulatory requirements.
• Monitor changes in privacy regulations and assess their potential impact on business operations.
• Provide practical privacy guidance to business, technology, HR, marketing, customer service, and other teams.
• Review data-processing activities and maintain accurate records of processing activities where applicable.
• Support data mapping exercises to identify where personal data is collected, stored, processed, transferred, and deleted.
• Assess third-party vendors and service providers that process personal or sensitive information.
• Review data-processing agreements, privacy clauses, vendor contracts, and information-sharing arrangements.
• Support the management of data-subject requests, including access, correction, deletion, and other applicable privacy rights.
• Coordinate with relevant teams to investigate and respond to privacy incidents and personal-data breaches.
• Assist with breach assessment, documentation, escalation, notification, and remediation activities where required.
• Monitor data retention and deletion practices to ensure information is handled according to applicable requirements.
• Review new products, services, applications, and technologies for privacy considerations.
• Support privacy-by-design and data-minimization principles throughout business and technology initiatives.
• Work with Information Security and IT teams to strengthen technical and organizational privacy controls.
• Conduct privacy compliance reviews, internal assessments, and control testing.
• Prepare privacy reports, dashboards, compliance updates, and management presentations.
• Maintain accurate documentation of privacy assessments, incidents, requests, policies, and compliance activities.
• Develop and deliver privacy awareness training and educational materials for employees.
• Promote responsible handling of personal data across the organization.
• Support internal and external audits relating to privacy, data protection, information governance, and compliance.
• Provide guidance on international data transfers and cross-border processing requirements where applicable.
• Monitor privacy-related risks associated with cloud services, artificial intelligence, analytics, CRM systems, and other emerging technologies.
• Support continuous improvement of privacy governance, processes, controls, and documentation.

• Bachelor's degree in Law, Information Privacy, Compliance, Information Security, Business, Risk Management, or a related field.
• Previous experience in Privacy, Data Protection, Compliance, Information Governance, Risk Management, or a similar role.
• Strong understanding of privacy principles and personal-data protection requirements.
• Knowledge of applicable data protection laws and regulatory frameworks relevant to the organization's operating markets.
• Familiarity with privacy frameworks, data governance principles, and privacy-by-design practices.
• Experience conducting privacy assessments, data mapping, risk assessments, or compliance reviews.
• Understanding of data lifecycle management, retention, deletion, and information classification.
• Familiarity with third-party privacy risk assessments and data-processing agreements.
• Understanding of information-security concepts and their relationship to privacy protection.
• Strong analytical and investigative skills with excellent attention to detail.
• Ability to interpret regulatory…