Senior GRC Analyst, Privacy

📋 Description

• Anchor and mature Benevity’s privacy program across global laws.
• Own ROPA, DSAR workflows, DPIAs, and subprocessor governance.
• Partner with Legal, Security, Engineering, Product on privacy by design.
• Support the DPO function, regulatory readiness, and breach prep.
• Translate privacy requirements into practical, scalable controls.

🎯 Requirements

• 5+ years in privacy, data protection, or GRC in SaaS/tech.
• Deep knowledge of GDPR, UK-GDPR, CPRA/CCPA, PIPEDA, CASL.
• Hands-on with ROPA, DSAR, DPIA, and subprocessor inventories.
• DPO function experience, regulatory interface, breach readiness.
• Experience with privacy/GRC tooling like OneTrust or Hyperproof.
• Strong ability to communicate privacy concepts to tech/legal teams.

🎁 Benefits

• Flexible hybrid work; no set in-office requirement.
• Global teams with DEIB focus and employee resource groups.
• Growth opportunities and meaningful, purpose-driven work.
• Accommodations available during hiring process.