Senior Enterprise Data Privacy Analyst

An established financial services organization in Virginia is seeking a Senior Enterprise Data Privacy Analyst for a hybrid role in Vienna. This position focuses on enterprise privacy governance, risk management, and cross-functional support for privacy-related initiatives.

About the Opportunity:

• Shift: Day shift


• Schedule: Monday to Friday


• Hours: Standard business


• Setting: Hybrid (at least 3 days a week onsite)

Responsibilities:

• Support the development and maintenance of privacy policies, standards, governance frameworks, and procedures


• Oversee Privacy Impact Assessments, including intake, review, tracking, reporting, and escalation of gaps


• Support privacy risk management activities, including risk assessments, issue management, remediation tracking, KRIs, metrics, and executive reporting


• Conduct or support third-party privacy reviews and coordinate with legal, compliance, security, procurement, technology, and business stakeholders


• Evaluate privacy considerations for AI, machine learning, and advanced analytics initiatives while supporting Privacy-by-Design practices

Qualifications:

• 10+ years of experience in privacy, data protection, privacy risk, compliance, or a related field


• Experience working in a highly regulated financial institution


• Strong understanding of PII, sensitive data, privacy risk management, and Privacy-by-Design


• Experience with PIAs/PRAs, risk assessments, issue management, controls, and remediation


• Experience developing governance documentation, metrics, KRIs, and executive reporting


• Excellent stakeholder management and communication skills


• Ability to work effectively across legal, compliance, security, technology, data management, procurement, and business teams


• Ability to translate regulatory requirements into practical, actionable governance expectations

Desired Skills:

• Second Line of Defense privacy or risk function experience


• Experience with data governance, data sharing, and records management


• Experience supporting regulatory, audit, and risk management commitments related to privacy


• Experience providing effective challenge to business stakeholders