Data Privacy Analyst

Job Description

Publicis Sapient’s Global Client Risk Office (GCRO) works across all disciplines and applicable geographies to identify, prevent and mitigate risks, providing visibility across the organization and empowering our people to use measured risk to make informed decisions that fuel sustainable growth in an ever‑evolving business landscape.

The Data Privacy Analyst role is an entry‑level support role that assists with the execution and day‑to‑day administration of the company’s global data privacy program. Working under the direction of the Global Data Privacy Program Lead and in partnership with Publicis Groupe’s Global Data Privacy Office (GDPO), this role helps coordinate and execute program activities, track deliverables, maintain documentation, support stakeholder follow‑up, and contribute to the identification, mitigation, and reporting of data privacy risks across regions, markets, and business processes.

The most typical project role will consist of leading sub‑tracks of work as part of a larger project and supporting senior GCRO leadership in the execution of day‑to‑day risk management and compliance related activities in various risk areas (such as business and operational, information security, artificial intelligence, legal and regulatory), with a particular emphasis on data privacy. It may also include working on cross‑functional initiatives or projects within GCRO as required.

Your Impact:

• Support the implementation and management of the global data privacy program alongside the Global Data Privacy Program Lead, helping to ensure program activities are executed consistently across relevant regions, markets, and internal teams.
• Support the development and implementation of strategies designed to minimize the risk of non‑compliance with applicable privacy regulations, including CCPA, PIPEDA, GDPR, and other relevant privacy laws.
• Partner with GDPO to operationalize legal/regulatory guidance across brand activities and processes.

• Support GCRO’s approach to identifying and assessing privacy risks as early as the RFP, MSA signing, and start‑work stages of the engagement lifecycle.
• Undertake reviews of business processes to confirm best practices are followed regarding the handling, use, storage, retention, and protection of personal data.
• Build working relationships with appropriate client‑facing, internal, legal, security, and other business stakeholders.
• Provide first‑level support to stakeholders regarding data privacy and protection policies, procedures, and program expectations; monitoring compliance and escalating complex matters as appropriate.
• Assist with special and cross‑functional projects related to privacy, risk management, compliance, data governance, process improvement, and operational efficiency.

Program Execution and Reporting:

• Under the supervision of the Global Data Privacy Program Lead, support core data privacy program activities within the assigned region or market, including issuing Data Inventory questionnaires to relevant contacts, ensuring completion, and performing quality checks on responses received.
• Facilitate factual due diligence activities for data privacy impact assessments, including gathering information, coordinating inputs, documenting findings, and tracking follow‑up actions.
• Conduct research on relevant topics, trends, regulations, industry practices, and internal priorities to enhance privacy knowledge and support informed decision‑making.
• Perform content development activities to support business initiatives, communications, training, and knowledge‑sharing efforts.
• Host, coordinate, and support training and awareness activities designed to strengthen privacy knowledge, accountability, and program adoption.
• Track and report on key metrics to monitor program status, progress, risks, blockers, and completion rates, including providing periodic updates on data privacy deliverables, open items, risks, and program progress for review by program leadership.
• Complete assigned tasks and responsibilities within designated timelines through effective use of internal status meetings, follow‑up mechanisms, personal time management, and prioritization skills.

Sta…