Risk Analyst III (6169)

Risk Analyst III

itD is seeking a Risk Analyst III to support global privacy compliance operations by managing high-volume People Data Subject Rights (DSR) requests and ensuring secure, compliant handling of sensitive personnel data. This role plays a critical part in maintaining the stability and responsiveness of the organization’s DSR program by partnering closely with program leadership and cross-functional stakeholders to meet global regulatory requirements and service-level commitments. The ideal candidate will bring hands-on experience in privacy compliance, risk management, or data protection operations, along with a proven track record of executing process-driven workflows with accuracy, confidentiality, and operational excellence.

Location: Remote – candidates based in California (Bay Area/San Francisco/Menlo Park) are highly preferred; however, candidates located anywhere in the U.S. will be considered. PST/West Coast working hours are strongly preferred.

Duration: 6 months

We provide comprehensive medical benefits, a 401k plan, paid holidays, and more.
Please note that we are only considering direct W2 candidates at this time, as we are unable to offer sponsorship.

Responsibilities

• Manage the end-to-end lifecycle of high-volume People Data Subject Rights (DSR) and Subject Access Requests (SAR) with a strong focus on accuracy, confidentiality, and compliance.
• Ensure all data requests are processed in alignment with global privacy regulations, including GDPR, CCPA, and other international data protection requirements.
• Partner with internal stakeholders to securely retrieve, review, redact, and deliver personnel data while identifying and mitigating privacy-related risks.
• Maintain detailed audit trails and documentation for all requests to support compliance reviews and regulatory obligations.
• Collaborate with Program Managers and operational teams to maintain SLA adherence and ensure ongoing program stability.
• Execute structured case management workflows and support process improvements within privacy operations.
• Monitor and escalate potential compliance or operational risks impacting request resolution timelines or data integrity.

Internal Responsibilities

• Attend regular internal practice community meetings.
• Collaborate with your itD practice team on industry thought leadership.
• Complete client case studies and learning material (blogs, media material).
• Build out material to contribute to the Digital Transformation practice.
• Attend internal itD networking events (in person and virtual).
• Work with leadership on career fast-track opportunities.

Required Qualifications and Skills

• 2–5 years of professional experience in risk management, privacy compliance, data protection, or related operational workflows.
• Strong foundational knowledge of global privacy and data protection regulations, including GDPR and CCPA.
• Experience managing high-volume, process-oriented case management workflows with strong attention to detail and accountability.
• Ability to handle sensitive and confidential employee or personnel data securely and accurately.
• Experience collaborating cross-functionally with internal stakeholders to support compliance operations and issue resolution.
• Strong documentation, audit tracking, and organizational skills.
• Bachelor’s degree required.

Preferred Qualifications and Skills

• Direct experience managing DSRs, SARs, or privacy-related requests in a corporate environment.
• Familiarity with HR data structures and privacy automation tools.
• Experience supporting U.S. and/or European privacy law compliance initiatives.
• CIPP/E, CIPP/US, or similar privacy certifications.
• Background supporting operational privacy or compliance programs within large-scale organizations.

Education

• Bachelor’s degree in a relevant field or equivalent work experience required.