Senior Privacy Analyst – DSAR & Risk Management

Overview

Drive day-to-day execution of the global privacy compliance program across UK/EU, US, APAC and other regions, owning program-level privacy operations, reporting and tooling.

What you'll do

• Structure and maintain privacy operations work in Azure DevOps, Jira or similar tools, including custom work item types and fields mapped to privacy concepts (jurisdiction, data type, risk tier).
• Build and maintain KPI dashboards and reporting (e.g., DSAR SLA compliance, assessment backlog age, incident response times) for privacy program leadership using ADO Analytics, Power BI or similar tools.
• Track cross-functional privacy work items that depend on Legal, Security and Product teams, and surface bottlenecks and at-risk items proactively.
• Coordinate responses to data subject access requests (DSARs) and other data subject rights requests, ensuring timely resolution within statutory timelines across jurisdictions.
• Conduct and document privacy impact assessments (PIAs), data protection impact assessments (DPIAs) and transfer impact assessments (TIAs) for new products, features and vendor engagements.
• Support automated assessment workflows that trigger and assign PIAs/DPIAs based on risk-based conditional logic, escalating high-risk triggers for senior review.
• Support efforts to reduce manual effort in assessment scoring and risk rating, applying judgment on what can be automated versus what must remain human-reviewed.
• Maintain and update the records of processing activities (ROPA), tying outputs to data mapping and risk assessment findings.
• Support data discovery and data flow mapping across systems, environments and third-party integrations, leveraging data discovery tooling where available.
• Support ongoing ownership and maintenance of the data map/ROPA, monitoring for drift as systems or vendors change and reconciling against discovery tool outputs.
• Monitor changes in privacy regulations across jurisdictions and support compliance with UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA and other applicable regimes.
• Support privacy incident response and breach notification processes, including incident documentation and breach register maintenance.
• Support privacy audits and assessments of internal processes and third-party vendors.
• Support intake and triage of privacy-related inquiries from internal stakeholders and customers.
• Partner with Legal, Information Security, IT, Product and Business teams to integrate privacy-by-design principles into the product development cycle.
• Assist with privacy training content delivery and tracking across the business.
• Support vendor and partner reviews to ensure contractual privacy obligations are met, and help identify current sub-processors for contractual documentation updates.
• Contribute to internal privacy policy, procedure and operational playbook documentation.
• Maintain privacy metrics, dashboards and reports for leadership and relevant stakeholders.
• Provide guidance and quality review to junior privacy operations team members on documentation and process adherence.

What you'll need

• 5-7 years of experience in a privacy, compliance, legal operations or similar role, supporting a global or multi-jurisdictional privacy program.
• Working knowledge of UK GDPR/EU GDPR, CCPA/CPRA, PIPEDA and other applicable global data subject rights frameworks.
• Hands-on experience with privacy management platforms (e.g., OneTrust, TrustArc) configuring or running DSAR, PIA/DPIA and data mapping workflows.
• Experience using work-management tools (e.g., Azure DevOps, Jira) to structure and track privacy operations work, including building reporting dashboards and KPIs for leadership.
• Exposure to or experience with automation of privacy workflows (e.g., Power Automate, API integrations between privacy platforms and ticketing systems) to reduce manual effort in DSAR, assessment and data mapping processes.
• Understanding of data discovery and data mapping tooling and techniques to keep ROPA records current and minimize drift.
• Strong attention to detail and organizational skills; comfortable managing multiple deadlines across time zones.
• Clear written and verbal communication skills, including the ability to brief stakeholders on program status and risk.

Nice to have

• CIPP/E, CIPP/US or CIPM certification, or actively pursuing.
• Experience building ADO/Jira custom work item types, boards, and Power BI or analytics dashboards for privacy KPI reporting.
• Experience with data discovery/classification tools (e.g., OneTrust Data Discovery, BigID, Collibra).
• Prior experience in a shared services, global operations or multinational organization.
• Familiarity with basic scripting or low-code automation (e.g., Power Automate) to support privacy workflow automation.

Details

• Location: Bangalore, Karnataka, India (Bengaluru).
• Hybrid work model for office-based roles.
• Work from anywhere for up to 8 weeks per year.