An established financial services organization in Virginia is seeking a Senior Enterprise Data Privacy Analyst for a hybrid role in Vienna. This position focuses on enterprise privacy governance, risk management, and cross-functional support for privacy-related initiatives.
About the Opportunity:
- Shift: Day shift
- Schedule: Monday to Friday
- Hours: Standard business
- Setting: Hybrid (at least 3 days a week onsite)
Responsibilities:
- Support the development and maintenance of privacy policies, standards, governance frameworks, and procedures
- Oversee Privacy Impact Assessments, including intake, review, tracking, reporting, and escalation of gaps
- Support privacy risk management activities, including risk assessments, issue management, remediation tracking, KRIs, metrics, and executive reporting
- Conduct or support third-party privacy reviews and coordinate with legal, compliance, security, procurement, technology, and business stakeholders
- Evaluate privacy considerations for AI, machine learning, and advanced analytics initiatives while supporting Privacy-by-Design practices
Qualifications:
- 10+ years of experience in privacy, data protection, privacy risk, compliance, or a related field
- Experience working in a highly regulated financial institution
- Strong understanding of PII, sensitive data, privacy risk management, and Privacy-by-Design
- Experience with PIAs/PRAs, risk assessments, issue management, controls, and remediation
- Experience developing governance documentation, metrics, KRIs, and executive reporting
- Excellent stakeholder management and communication skills
- Ability to work effectively across legal, compliance, security, technology, data management, procurement, and business teams
- Ability to translate regulatory requirements into practical, actionable governance expectations
Desired Skills:
- Second Line of Defense privacy or risk function experience
- Experience with data governance, data sharing, and records management
- Experience supporting regulatory, audit, and risk management commitments related to privacy
- Experience providing effective challenge to business stakeholders