Privacy Analyst - 3522758

$93,400 - $100,000/Yr

Tcg Corporation Ltd - Washington, DC

Full-time - Mid Level

Washington, DC

Professional, Scientific, and Technical Services

About the position

The Privacy Analyst at TCG is responsible for collecting, analyzing, and translating complex data into accessible information, focusing on identifying Personally Identifiable Information (PII) across the organization's systems. This role involves assessing business policies and operations to ensure compliance with privacy regulations and developing strategies for improvement. The Privacy Analyst will also create training materials to support effective management of privacy protection and risk mitigation related to sensitive information.

Responsibilities

• Conduct privacy risk assessments and resolve privacy violation crises.
• Ensure compliance with data privacy and protection regulations, including GDPR, CCPA, and NIST.
• Answer queries regarding global data privacy processing and protection requirements from internal stakeholders.
• Educate personnel through privacy training and maintain workplace privacy standards.
• Develop and implement privacy policy improvements and processes.
• Conduct compliance gap analyses and readiness assessments for upcoming policy changes.
• Create and maintain documentation, including privacy notices, privacy statements, SOPs, and guidance notes in collaboration with legal teams.
• Manage the Data Subject Request process, ensuring timely and compliant responses.
• Collect and maintain records of processing activities and prepare reports on regulatory compliance.
• Prepare and deliver reports on privacy analyses and escalate potential data breaches for investigation and resolution.

Requirements

• A minimum of 5 years of experience
• Strong knowledge of legal aspects of privacy regulations relevant to the industry.
• Proficient in compliance management platforms such as TrutArc or OneTrust.
• Experience conducting compliance gap analysis and readiness assessments.
• Ability to track and analyze data through its lifecycle using relevant tools.
• Excellent communication and training skills for educating personnel on privacy protection.

Nice-to-haves

• Experience with Data Protection Impact Assessments and Data Subject Requests.
• Background in business process engineering or compliance analysis.
• Familiarity with a wide range of global and local data privacy and protection regulations.
• Strong analytical skills to assess business operations and recommend strategic improvements.
• Relevant certifications in data privacy or compliance (e.g., CIPP, CIPM).

Benefits

• Full Benefits Package (Medical/Dental/Vision/401(k)/Paid Time Off)
• Parental leave
• Adoption assistance
• Financial planning services
• Student loan repayment assistance
• Training budget