Data Privacy Analyst

We are seeking a detail-oriented and analytical Data Usage & Documentation Analyst to join our IT team. This role is responsible for researching, mapping, and documenting how data is used across the F9 IT ecosystem and within our third-party vendor relationships. The ideal candidate will play a key role in enhancing data governance, supporting compliance efforts, and improving transparency across internal and external data flows. Looking for Data Analyst with expertise in data handling, compliance, and privacy regulations.

Key Responsibilities:

• Data Flow Mapping: Identify and document how data is collected, processed, stored, and shared across internal systems and platforms.
• Third-Party Data Analysis: Evaluate data exchange practices with vendors, partners, and service providers to ensure alignment with security and compliance standards.
• Documentation Development: Create and maintain comprehensive records of data usage, including diagrams, inventories, and usage logs.
• Maintain accurate and up-to-date Records of Processing Activities (ROPA) in line with GDPR and local privacy regulations. Ensure data handling practices align with security, confidentiality, and compliance standards.
• Risk Management: Highlight potential data risks or inefficiencies in current processes and recommend mitigation strategies. Support third party risk management.
• Participate in privacy impact assessments (PIA).
• Compliance Support: Assist in ensuring data practices meet regulatory requirements such as GDPR, DPDP, HIPAA, or ISO 27001.
• Stakeholder Collaboration: Work closely with IT, Legal, Security, and Procurement teams to gather insights and validate documentation.
• Audit Readiness: Prepare documentation and reports to support internal and external audits. Support data protection impact assessments (DPIAs) and audits by providing relevant data processing documentation.
• Report: Monitor the risk regularly and report the same to the top management via Security Scorecard.

Qualifications:

• Bachelor's degree in computer science, Information Systems, Data Management, or related field.
• 3+ years of experience in data governance, documentation, or IT compliance roles.
• Familiarity with data mapping tools (e.g., Collibra, BigID) and documentation platforms (e.g., Confluence, SharePoint).
• Strong understanding of data privacy regulations and third-party risk management.
• Excellent analytical, organizational, and communication skills.

Preferred Skills:

• Experience working in complex IT ecosystems with multiple integrations.
• Knowledge of vendor risk assessment frameworks.
• Ability to translate technical data flows into clear, non-technical documentation.
• Certification in data privacy or governance (e.g., CIPP, CDMP, CISA) is a plus.

For a role focused on researching and documenting data usage across an IT ecosystem and third-party relationships, candidates should prioritize a blend of technical, analytical, and communication skills. Here's a breakdown of the most valuable ones:

Core Technical Skills:

Data Mapping & Modeling:-

Ability to visualize and document how data flows across systems and vendors.

Data Governance Tools :-

Familiarity with platforms like Varonis Data Security Platform and managing data assets is an added advantage.

Documentation Platforms:-

Experience with tools like Confluence, SharePoint, or Notion to create structured, accessible documentation.

Analytical & Compliance Skills:

Data Classification & Sensitivity Analysis:-

Understanding of how to categorize data (e.g., PII, financial, operational) and assess its risk level.

Regulatory Knowledge:-

Awareness of data privacy laws such as GDPR, HIPAA, DPDP, and ISO 27001 standards.

Third-Party Risk Assessment:-

Ability to evaluate vendor data practices, contracts, and security postures.

Audit Readiness:-

Skills in preparing documentation and evidence for internal and external audits.

Communication & Collaboration Skills:

Stakeholder Engagement:-

Ability to work cross-functionally with IT, Legal, Security, and Procurement teams.

Technical Writing:-

Clear and concise documentation of complex data processes for both technical and non-technical audiences.

Attention to Detail:-

Precision in tracking data flows, identifying inconsistencies, and maintaining version control.

Problem Solving & Critical Thinking:-

Capacity to identify gaps in data usage and propose actionable improvements.

Certifications:

Credentials like CIPP (privacy), CDMP (data management), or CISA (audit) can add credibility.