Analyst II, Cybersecurity - Information Risk Management

What you'll do

• Coordinate with technology teams to capture, assess, and process data subject access requests (DSAR).
• Manage privacy operations using service delivery principles to meet established SLAs and report performance metrics.
• Identify and implement automation and AI solutions to simplify and strengthen privacy risk management processes.
• Administer standalone and integrated platforms used for daily privacy technology operations.
• Facilitate ongoing data privacy assessments of internal systems to manage enterprise-wide data sensitivity risks.
• Manage the lifecycle of information security policies, procedures, and standards to ensure they remain current.
• Create and maintain technical documentation, including playbooks and job aids, for an internal knowledge base.

What we're looking for

• Bachelor’s degree in business, computer science, information systems, or a related field.
• At least 2 years of experience in privacy, technology compliance, IT audit, cybersecurity, or a related field.
• Possession of at least one privacy-focused certification such as CIPP, CIPM, CIPT, CIA, CRSC, or CISA.
• Familiarity with U.S. legal frameworks and privacy regulations including CCPA, GLBA, PCI, NYDFS, and CFPB.
• Ability to perform data analysis, identify trends, and solve problems in a fast-paced environment.
• Strong verbal and written communication skills to deliver clear messaging to diverse audiences.
• Ability to implement information risk and privacy principles across various disciplines using a risk-based approach.
• Must be authorized to work in the United States on a full-time basis.