Data Privacy Analyst

About the role

We are seeking a hands‑on Data Privacy Analyst to help build and mature our privacy programme as we scale. In this mid‑level position you will work closely with product, engineering, legal and compliance teams to embed privacy into every aspect of our operations.

Key responsibilities

• Partner with General Counsel to ensure compliance with CCPA/CPRA, VCDPA, CPA and emerging state privacy laws.
• Own the end‑to‑end data subject request (DSAR) process, coordinating with Customer Service to handle deletion, correction and opt‑out requests.
• Maintain and improve privacy‑operation tooling and documentation, keeping workflows audit‑ready.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for high‑risk processing activities.
• Develop and keep up‑to‑date the organization’s data inventory, data flow maps and Records of Processing Activities (RoPA).
• Draft, review and update privacy policies, cookie notices and consumer disclosures in partnership with Legal.
• Evaluate vendor data practices, negotiate data processing agreements and perform third‑party privacy assessments.
• Monitor changes in the privacy regulatory landscape and advise cross‑functional teams on required adjustments.

Required profile

• Mid‑level experience in privacy, data protection or compliance roles.
• Strong understanding of US state privacy regulations (CCPA/CPRA, VCDPA, CPA, etc.).
• Ability to translate complex legal requirements into practical guidance for product and engineering teams.
• Excellent communication and stakeholder‑management skills.

Required skills

• Experience with privacy‑management platforms such as DataGrail or OneTrust.
• Familiarity with privacy impact assessment methodologies.
• Knowledge of data mapping, data inventory and Records of Processing Activities.

What we offer

• Opportunity to shape a growing privacy programme.
• Collaborative environment across legal, product and engineering.
• Competitive compensation and benefits.