Privacy Analyst

Job Description

What you ll do at Ather

- Privacy Technology Implementation & Maintenance:
- Assist in the selection, implementation, and management of privacy-enhancing technologies (PETs) such as data discovery & mapping, consent management, data masking, tokenization, encryption, and anonymization.
- Maintain and troubleshoot privacy-related software and tools.
- Evaluate the effectiveness of existing privacy technologies and recommend improvements.
- Privacy Impact Assessments (PIAs) & Data Protection Impact Assessments (DPIAs):
- Conduct PIAs and DPIAs for new and existing products and services, identifying and mitigating privacy risks.
- Document and track PIA/DPIA findings and recommendations.
- Work with product and engineering teams to implement privacy controls.
- Data Mapping & Inventory:
- Assist in the development and maintenance of data maps and inventories.
- Identify and classify sensitive data.
- Ensure data flows are documented and compliant with privacy regulations.
- Compliance Monitoring & Reporting:
- Monitor and report on compliance with relevant privacy regulations and standards.
- Assist in the development and delivery of privacy training and awareness programs.
- Support internal and external privacy audits.
- Collaboration & Communication:
- Collaborate with cross-functional teams, including engineering, security, legal, and compliance.
- Communicate privacy requirements and best practices to stakeholders.
- Stay up-to-date on the latest privacy regulations and technologies.
-

Here s what we re looking for

Desired Technical Skills:

- Privacy-Enhancing Technologies (PETs):
- Data masking, tokenization, encryption, anonymization, differential privacy, synthetic data.
- Understanding of how these technologies are applied in various contexts.
- Data Mapping & Inventory Tools:
- Familiarity with tools used for data discovery, classification, and mapping.
- Ability to document and analyze data flows.
- Security Technologies:
- Basic understanding of information security principles and practices.
- Knowledge of security controls related to data protection.
- Cloud Computing:
- Familiarity with cloud platforms (e.g., AWS, Azure, GCP) and their privacy implications.
- Understanding of cloud based data storage and security.
- Programming/Scripting (Optional but Beneficial):
- Basic scripting skills (e.g., Python, SQL) for data analysis and automation.

Privacy Knowledge:

- Global Privacy Regulations:
- In-depth knowledge of Principals of DPDPA, GDPR, CCPA, and other relevant privacy laws.
- Understanding of data subject rights and obligations.
- Privacy Frameworks & Standards:
- Familiarity with privacy frameworks such as NIST Privacy Framework and ISO 27701.
- Knowledge of privacy best practices.
- Privacy Impact Assessments (PIAs) & Data Protection Impact Assessments (DPIAs):
- Ability to conduct thorough PIAs/DPIAs and identify privacy risks.
- Experience in documenting and tracking PIA/DPIA findings.

Soft Skills:

- Analytical & Problem-Solving:
- Ability to analyze complex data and identify privacy risks.
- Strong problem-solving skills to develop effective solutions.
- Communication & Collaboration:
- Excellent written and verbal communication skills.
- Ability to collaborate effectively with cross-functional teams.

Attention to Detail:

- Meticulous attention to detail in data analysis and documentation.

Adaptability & Learning:

- Ability to adapt to changing privacy regulations and technologies.
- Commitment to continuous learning.

Ethical Judgement:

- Ability to maintain confidentiality and handle sensitive data with integrity.

What you bring to Ather

- Bachelor s Degree in Information Technology or Computer
- 3+ years of experience in Information Security, Risk & Compliance and 1 year of experience in Privacy Tech implementing Data Privacy Automation tool
- IT Product Management or Privacy Program Management is a plus

---