Note: The job is a remote job and is open to candidates in USA. Matlen Silver provides talent and technology solutions for complex workforce and technology needs. The company is seeking a Data Privacy Analyst to support an enterprise privacy and data-retention program within a fintech organization. The role focuses on privacy risk assessments, regulatory compliance, data governance, privacy operations, audit documentation, and cross-functional stakeholder guidance.
Responsibilities
- The Data Privacy Analyst will partner closely with Privacy, Cybersecurity, Risk Management, Legal, Technology, and business teams to identify privacy risks, implement appropriate controls, maintain audit-ready documentation, and translate regulatory requirements into practical business and technical guidance
- The selected consultant will assist with privacy impact assessments, data-processing reviews, data mapping, retention requirements, DSAR workflows, privacy controls, incident response documentation, and regulatory audit preparation
- The project also involves partnering with Cybersecurity and Risk Management teams to incorporate privacy requirements into technology solutions, access controls, encryption practices, data lifecycle processes, and third-party vendor agreements
- The current focus is on evaluating existing privacy practices, identifying risks and control gaps, improving privacy documentation, and establishing scalable processes that support ongoing compliance
Skills
- 4 to 5+ years of experience in data privacy, privacy compliance, information governance, GRC, or a closely related field
- Strong working knowledge of privacy regulations such as GDPR, CCPA/CPRA, HIPAA, or other applicable privacy laws
- Hands-on experience conducting Privacy Impact Assessments, PIAs, Data Protection Impact Assessments, or DPIAs
- Experience assessing data-processing activities and identifying privacy risks, controls, and remediation actions
- Experience with data mapping, data inventories, data classification, or records of processing activities
- Experience developing, implementing, or supporting data retention policies, retention schedules, or data lifecycle requirements
- Experience supporting Data Subject Access Requests, DSARs, or other consumer privacy-rights requests
- Understanding of encryption, access controls, data loss prevention, and security controls related to sensitive data
- Experience identifying, documenting, assessing, and mitigating privacy risks across complex projects
- Experience supporting privacy incidents, data-breach response, regulatory reporting, or post-incident documentation
- Experience maintaining documentation and control evidence for privacy audits, regulatory examinations, or internal reviews
- Proficiency with Tableau, Power BI, or a comparable data-visualization and reporting platform
- Ability to develop privacy dashboards, program metrics, or executive-level reporting
- Strong communication and stakeholder-management skills
- Ability to translate technical and regulatory privacy requirements into clear, actionable guidance
- Experience working with cross-functional teams, including Privacy, Cybersecurity, Risk Management, Legal, Technology, and business stakeholders
- Ability to work independently and manage priorities in a fully remote consulting environment
- Due to client requirements this role is only open to USC or GC candidates
- Experience with BigID, OneTrust, TrustArc, Securiti, Collibra, or a comparable privacy or data-governance platform
- Experience with data discovery, data classification, data mapping, or privacy-management technology
- Experience working within fintech, banking, payments, lending, or financial-services environments
- Experience developing or maintaining enterprise privacy policies, standards, procedures, and governance documentation
- Experience implementing privacy controls within technology solutions and system-development processes
- Understanding of privacy by design and privacy engineering principles
- Experience reviewing third-party vendor privacy requirements, data-processing agreements, or contract controls
- Experience supporting Records of Processing Activities, ROPAs
- Experience with consent management, cookie compliance, or preference-management processes
- Experience delivering employee privacy training or awareness materials
- Experience presenting privacy metrics, risk findings, and program updates to leadership
- Experience with Agile delivery environments and cross-functional project teams
- CIPP/US, CIPM, CIPT, or a similar privacy certification
- Experience managing multiple privacy workstreams in a fast-paced or highly regulated environment
Benefits
- Health, vision, and dental insurance (single and family coverage)
- 401(k) plan (employee contributions only)
Company Overview