Privacy Analyst
Location: Nashville, TN
Salary: $125,000–$150,000
Employment Type: Full-Time, Direct Hire
Schedule: Hybrid, 4 days on site with flexibility
About the Role
We are looking for a Privacy Analyst to join a growing privacy and AI governance function within a fast-moving data and technology company.
This is not a traditional cybersecurity engineering role, nor is it strictly a legal privacy position. It's a writing- and research-intensive role for someone who enjoys digging into complex privacy, security, and compliance questions and turning technical information into clear, accurate documentation.
A significant portion of your time will be spent researching, writing, reviewing, and editing detailed reports. You'll partner with data engineering, implementation, product, and commercial teams to understand how data is being used, identify privacy and security considerations, and document findings in a consistent and defensible way.
If you have a background in data privacy, GRC, cybersecurity risk, technology risk, IT audit, security compliance, or consulting and you're an exceptional writer, this could be a strong fit.
What You'll Do
- Research privacy, data security, compliance, and risk questions involving new data types and use cases
- Write, edit, and review detailed, fact-heavy privacy and security reports
- Turn technical input from engineering and implementation teams into clear, concise documentation
- Manage and respond to privacy requests submitted by teams across the organization
- Interview internal stakeholders to gather information and identify gaps or additional questions
- Evaluate security and compliance controls and the risks those controls are designed to mitigate
- Help document privacy methodologies related to data protection and de-identification
- Perform detailed research to support privacy and security conclusions
- Maintain accuracy and consistency across complex documentation
- Help develop templates, processes, and repeatable workflows as the privacy function grows
- Use AI tools such as Claude and OpenAI to streamline routine work while maintaining ownership of research, judgment, and accuracy
What We're Looking For
- Exceptional professional writing and editing skills
- Experience producing detailed reports, assessments, audit documentation, research, or similar written deliverables
- Experience in one or more of the following areas:
- Data privacy
- GRC / Governance, Risk and Compliance
- Cybersecurity risk
- Technology risk
- Security compliance
- IT audit
- Privacy operations
- Cybersecurity or risk consulting
- Working knowledge of security and compliance auditing, including concepts such as SOC 2
- Strong research and analytical skills with an auditor-style attention to detail
- Ability to gather information from technical stakeholders and translate it for different audiences
- Comfort working with ambiguity and researching unfamiliar topics
- Experience using or willingness to regularly use generative AI tools
- Ability to thrive in a growing organization where processes and priorities can change quickly
What Will Make You Stand Out
- Big 4, consulting, cybersecurity consulting, technology risk, or audit experience
- Experience with privacy assessments, security assessments, compliance audits, or GRC programs
- Experience working with sensitive or regulated data
- Exposure to AI governance, AI privacy, data privacy, or de-identification
- Strong long-form writing, legal drafting, research, or technical documentation experience
- Experience taking complex subject matter and creating documentation that is accurate, concise, and easy to follow
By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions.
