An established financial services organization in Virginia is seeking a Senior Enterprise Data Privacy Analyst for a hybrid role in Vienna. This position focuses on enterprise privacy governance, risk management, and cross-functional support for privacy-related initiatives.
About the Opportunity:
-
Shift: Day shift
-
Schedule: Monday to Friday
-
Hours: Standard business
-
Setting: Hybrid (at least 3 days a week onsite)
Responsibilities:
-
Support the development and maintenance of privacy policies, standards, governance frameworks, and procedures
-
Oversee Privacy Impact Assessments, including intake, review, tracking, reporting, and escalation of gaps
-
Support privacy risk management activities, including risk assessments, issue management, remediation tracking, KRIs, metrics, and executive reporting
-
Conduct or support third-party privacy reviews and coordinate with legal, compliance, security, procurement, technology, and business stakeholders
-
Evaluate privacy considerations for AI, machine learning, and advanced analytics initiatives while supporting Privacy-by-Design practices
Qualifications:
-
10+ years of experience in privacy, data protection, privacy risk, compliance, or a related field
-
Experience working in a highly regulated financial institution
-
Strong understanding of PII, sensitive data, privacy risk management, and Privacy-by-Design
-
Experience with PIAs/PRAs, risk assessments, issue management, controls, and remediation
-
Experience developing governance documentation, metrics, KRIs, and executive reporting
-
Excellent stakeholder management and communication skills
-
Ability to work effectively across legal, compliance, security, technology, data management, procurement, and business teams
-
Ability to translate regulatory requirements into practical, actionable governance expectations
Desired Skills:
-
Second Line of Defense privacy or risk function experience
-
Experience with data governance, data sharing, and records management
-
Experience supporting regulatory, audit, and risk management commitments related to privacy
-
Experience providing effective challenge to business stakeholders
