Analyst, Privacy (Privacy Assessments)

Own end-to-end privacy assessments for new products and features, synthesizing findings and working with cross-functional partners in Legal, Product, and Engineering to drive remediation.

Map regulatory requirements against the privacy common controls framework and identify where controls need updating to address evolving obligations.

Track privacy requirements and issues across the product lifecycle, managing escalations and ensuring timely resolution with business owners.

Partner with Product and Engineering teams by participating in roadmap planning and advising on privacy-by-design principles for onchain and web3 products.

Identify and implement automation and AI-driven improvements to streamline privacy assessment and issue management workflows.

3+ years of experience in technology risk management with a focus on privacy or security, including hands-on experience conducting privacy assessments (such as DPIAs/PIAs or data flow reviews).

Demonstrated ability to map regulatory requirements (GDPR, CCPA, PIPEDA, ePrivacy) to operational controls and validate remediation efforts.

Proven ability to translate privacy legal guidance and product specifications into functional requirements and actionable remediation plans.

Experience managing a high volume of concurrent assessments while balancing strategic priorities and stakeholder escalations across technical and non-technical audiences.

Familiarity with applying privacy principles to blockchain, onchain, and web3 products, or willingness to develop this expertise quickly.

Ability to use generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.