Senior GRC Analyst, Privacy

📋 Description

• Own and maintain ROPA across controller/processor regimes and jurisdictions.
• Develop privacy policies, notices, standards, and controls across GDPR, CPRA, PIPEDA, CASL.
• Manage DSAR intake, triage, and responses with deadlines; coordinate with business.
• Design and operationalize DPIA; embed into product/data workflows; support DPO readiness.
• Maintain privacy workflows in GRC tools; deliver exec reports; leverage AI to scale.

🎯 Requirements

• 5+ years in privacy, data protection, or related field.
• Deep knowledge of GDPR, UK-GDPR, CPRA/CCPA, PIPEDA, CASL.
• Hands-on DSAR and DPIA experience; DPIA process design.
• Experience with privacy or GRC tooling (OneTrust, Hyperproof, or equivalent).
• Able to communicate complex privacy concepts to diverse audiences.
• Certifications such as CIPP/E, CIPP/US, or CIPM are valued.

🎁 Benefits

• Flexible hybrid work model with optional in-office time.
• Strong DEIB culture and employee resource groups.
• Growth opportunities and purpose-driven work.
• Accommodations available for candidates with disabilities.