We are looking for an experienced Privacy Analyst to support the organization's privacy operations and ensure compliance with global data protection laws and regulations. In this role, you will work closely with stakeholders across IT, Information Security, Legal, Compliance, and business functions to strengthen privacy governance and ensure the appropriate handling of personal data.

You will play a key role in implementing privacy processes, managing data protection requests and incidents, promoting Privacy by Design, and supporting global privacy compliance initiatives.

Key Responsibilities

• Support stakeholders in documenting and maintaining Records of Processing Activities (RoPA) using OneTrust, ensuring data accuracy and quality.

• Manage Data Subject Requests (DSRs) and personal data breaches in accordance with established privacy policies and procedures.

• Collaborate with Legal, Compliance, Information Security, and business teams to address privacy-related matters.

• Develop guidance on personal data retention and implement data hygiene initiatives, including data cleansing, deletion, and sanitization.

• Promote and implement Privacy by Design principles across projects, business changes, products, and IT solutions.

• Identify privacy risks and support teams in developing solutions that meet applicable data protection requirements.

• Contribute to strategic privacy and data protection projects.

• Drive privacy training, awareness programs, and internal communication initiatives.

• Coordinate IT compliance activities with Information Security and Operational Control teams.

• Maintain relationships with local Data Protection Officers (DPOs) and support regional and global privacy compliance initiatives.

• Provide clear, practical advice on privacy matters to stakeholders at different organizational levels.

• Prepare newsletters, articles, and other internal communications to promote privacy awareness.

• Monitor developments in global privacy laws and regulations and assess their potential impact on the organization.

• Develop an understanding of business processes, data flows, and IT systems to support effective privacy management.

Required Qualifications and Experience

• Bachelor's degree or higher in Law, Information Security, IT, Business Administration, or a related field.

• 3–5 years of professional experience in data privacy, data protection, or privacy compliance.

• Strong knowledge of global privacy laws and regulations, including GDPR, CCPA, POPIA, and other applicable data protection frameworks.

• Hands-on experience implementing or managing OneTrust, particularly for Records of Processing Activities.

• Knowledge of information security principles, privacy risk management, and compliance processes.

• Experience handling Data Subject Requests and personal data breach processes.

• Strong proficiency in Microsoft Office 365 applications, including Word, Excel, and PowerPoint.

• Excellent written and verbal communication skills, with the ability to communicate effectively across different teams and organizational levels.

Preferred Qualifications

• Professional certifications such as CIPP or equivalent privacy and data protection certifications.

• Experience with privacy compliance platforms, AI governance tools, or other privacy technology solutions.

• Experience implementing Privacy by Design in IT projects and business transformation initiatives.

• Experience working in a global, multinational, and multicultural organization.

Key Competencies

• Strong analytical, problem-solving, and risk assessment skills.

• Excellent stakeholder management and relationship-building abilities.

• Ability to manage multiple priorities and work independently with minimal supervision.

• Proactive, flexible, and service-oriented approach.

• Strong collaboration skills and openness to different perspectives and feedback.

• Excellent organizational skills and attention to detail.

• Ability to communicate complex privacy requirements in a clear and practical manner.

• Flexibility to participate in meetings across different global time zones.