Technology Risk Data Privacy Associate

What you'll do

• Execute and enhance personal data security initiatives focusing on technical controls and security reviews.
• Drive the adoption of privacy-enhancing technologies like encryption, data masking, and access controls across platforms.
• Develop scalable processes to ensure data security controls align with privacy-by-design principles.
• Advise engineering teams on integrating firm-wide security policies and standards into their development workflows.
• Conduct security reviews of systems and applications to identify risks and recommend technical mitigation strategies.
• Translate regulatory requirements from Legal and Compliance into actionable technical security controls.
• Provide clear verbal and written guidance to business and technology staff regarding data privacy matters.

What we're looking for

• Bachelor’s degree in information/cyber security, Computer Science, Software Engineering, or a related technical field.
• 1-3 years of experience in security, technical risk management, or a data protection function.
• Strong understanding of data security concepts including encryption, access controls, data minimization, and de-identification.
• Technical knowledge of technology architecture, infrastructure, and the Software Development Lifecycle (SDLC).
• Proficiency with data analysis tools such as Excel, PowerBI, or Alteryx.
• Excellent oral, written, and presentation communication skills to explain complex technical details.
• Relevant industry certifications such as Security+, CySA+, CCSP, CIPT, CISSP, or CIPM (preferred).
• Experience with risk frameworks, database technologies, networking, or data lifecycle management (preferred).