Lead Data Privacy Analyst - Remote

Ferguson Enterprises - Remote, OR

Full-time - Mid Level

Remote - Remote, OR

10,001+ employees

Merchant Wholesalers, Durable Goods

About the position

The Lead Data Privacy Analyst will join the Information Security GRC team within Ferguson's IT organization, focusing on U.S. privacy laws and regulations. This role is responsible for supporting the data privacy program through planning, design, implementation, operation, and maintenance of IT Governance, Risk & Compliance (GRC) efforts. The ideal candidate will ensure compliance with data protection principles and privacy frameworks, perform risk assessments, and support privacy operations to protect sensitive data.

Responsibilities

• Track and ensure compliance with U.S. data privacy regulations, including CCPA and other state-specific laws.
• Conduct privacy impact assessments (PIAs) and data protection assessments (DPAs) for projects involving personal and sensitive data.
• Draft, review, and update data privacy policies and procedural standards to align with evolving regulations and best practices.
• Collaborate with legal, IT, vendor risk management, and other multi-functional teams to educate and guide on data privacy practices.
• Design and conduct privacy training programs for employees to promote compliance and awareness throughout the organization.
• Prepare documentation, maintain records, and aid in data privacy audits and assessments to ensure regulatory alignment.

Requirements

• Minimum of 2 years of experience in data privacy, data protection, or compliance roles with a U.S. focus and 7-10 years plus of overall IT experience.
• Bachelor's degree or equivalent experience in information security, computer science, or a related field.
• Experience in a large, sophisticated organization.
• Experience with Securiti.ai, One Trust, or other enterprise data privacy platform.
• Experience with data mapping tools and process activity documentation.
• Knowledge of key U.S. data privacy laws and standards such as CCPA and other US state regulations.
• Professional certification (e.g., CIPP/US, CIPM, CIPT) is preferred.
• Proven experience in planning, organizing, and developing IT security teams and strategy, whether staff or third parties.
• Support compliance with the Ferguson Enterprise Data Privacy Platform.
• Exposure to data processing, hardware platforms, enterprise software applications and outsourced systems, with preference in Microsoft Technologies.
• Expertise in using cloud-based solutions necessary to enable the distributed enterprise.
• Good understanding of computer systems characteristics, features and integration capabilities.
• Proven leadership ability: ability to instill confidence in the business and demonstrate the business value of IT.
• Exceptional leadership skills with the ability to develop and communicate an enterprise security vision that inspires and motivates staff and aligns to the IT and business strategy.
• Effective influencing and negotiation skills in an environment where resources may not be in direct control of this role.
• Strong analytical skills, ability to think critically and strategically.
• Strong intuition for business, including industry, domain-specific knowledge of the enterprise and its business units.
• Success in using both traditional best practices, such as IT service management practices based on ITIL, as well as emerging methods like DEV/SEC/OPS that are optimized for agility.
• Demonstrated ability to develop and implement a strategic people plan that ensures that the right people are in the right roles at the right time and that employees are highly engaged and satisfied.
• Excellent verbal and written communication skills, including the ability to explain technical concepts and technologies to business leaders, and business concepts to the security workforce.

Nice-to-haves

• Professional certification (e.g., CIPP/US, CIPM, CIPT) is preferred.

Benefits

• Health insurance coverage
• Dental insurance coverage
• Vision insurance coverage
• Paid time off
• Life insurance coverage
• 401(k) with company match
• Mental health coverage
• Gender affirming and family building benefits
• Paid parental leave
• Associate discounts
• Community involvement opportunities