Senior Privacy Analyst

About the role

The Privacy function develops, implements, and administers the organization's global data privacy program. The Senior Privacy Analyst independently leads complex privacy assessments and initiatives, advises business and product stakeholders, identifies and drives remediation of privacy risks, and contributes to the continued maturity and effectiveness of the privacy program.

Your key responsibilities will include independently assessing complex processing activities and internal controls, analyzing privacy program effectiveness and compliance, advising stakeholders on privacy by design, and driving identified risks and remediation activities to resolution.

Primary responsibilities do not include data security aspects, which are covered by the Office of the Vice President of Security.

Responsibilities

In this role, you will independently lead complex privacy work, provide practical and risk-based guidance to stakeholders, and drive privacy initiatives across the organization.

• Serve as a senior privacy subject matter expert and trusted advisor by providing practical, risk-based guidance and promoting consistent privacy best practices across the organization.
• Nurture a privacy-centric culture through stakeholder engagement, awareness activities, and practical guidance.
• Lead cross-functional engagement with key business areas to embed privacy by design, evaluate data privacy risks, establish accountable remediation plans, and track identified risks through closure.
• Lead complex, global assessments of personal data processing activities across Ivanti products, services, and subprocessors; document and track risks and obligations through PIAs, DPIAs, LIAs, and ROPAs; and drive identified actions to completion.
• Address escalated privacy-specific questions from customer and third-party due diligence questionnaires, coordinate privacy subject matter input, and validate privacy representations.
• Oversee the validation and fulfillment of consumer and employee privacy rights requests, advise stakeholders on complex cases, monitor regulatory deadlines, and escalate material privacy risks or exceptions.
• Own and coordinate responses to complex privacy inquiries from business, product, customer-facing, and internal stakeholders, provide consistent guidance, and escalate significant legal or regulatory questions when appropriate.
• Interpret global privacy laws, regulations, regulatory guidance, and enforcement developments; assess their impact on Ivanti; and translate changes into practical recommendations for relevant stakeholders.
• Own the development, implementation, maintenance, and continuous improvement of scalable privacy processes, procedures, controls, and supporting documentation.
• Serve as the privacy subject matter expert for product audits and assessments, coordinate privacy evidence, identify privacy risks, and drive privacy corrective actions to completion.
• Lead privacy event, incident, and breach investigations; coordinate relevant stakeholders; document findings; and track privacy-related corrective actions to completion.
• Lead or contribute to complex privacy projects and program initiatives based on organizational priorities.
• Perform additional projects, tasks, and responsibilities as assigned based on evolving organizational needs.

Experience Required

• 5+ years of progressively responsible privacy experience, including independent ownership of complex, cross-functional initiatives; substantial exposure to global data protection and privacy laws and regulations (e.g., GDPR and CCPA) and relevant standards and frameworks (e.g., ISO 27001, SSAE 18, the NIST Privacy Framework, and Privacy by Design).
• Demonstrated ability to translate complex privacy requirements into practical business guidance and use a range of communication, consultation, and influencing techniques to negotiate priorities, resolve issues, and drive change with stakeholders at all levels across functions such as Operations, HR, IT, Security, Legal, and Product.
• Experience applying privacy requirements in a global technology environment, preferably involving software, SaaS, or cloud services.
• Demonstrated ability to review technical documentation, system architecture, and data flow diagrams to identify personal data processing activities, understand data flows, and assess privacy risks.
• Bachelor's degree in privacy, law, information governance, information systems, business, or a related field, or equivalent relevant professional experience.
• At least one recognized privacy certification, such as CIPP, CIPM, or CIPT, or other relevant certification.

Skills and Competencies

Demonstrated ability to work independently in a distributed environment, exercise sound judgment with limited supervision, manage competing priorities, and recognize when significant privacy risks require escalation.

• Demonstrated ability to quickly assess unfamiliar issues, adapt to changing priorities, and deliver sound, timely guidance in a fast-paced and highly dynamic environment.
• Strong attention to detail, with the ability to maintain accuracy across complex assessments, regulatory obligations, records, and stakeholder communications.
• Commitment to continuous professional development and maintaining current knowledge of evolving privacy laws, regulatory expectations, technological advances, and industry practices, including how changes in technology affect the interpretation and practical application of privacy requirements.
• Demonstrated ability to manage competing priorities, coordinate interdependent activities, and meet deadlines under pressure while maintaining sound judgment and work quality.

• This job posting will remain active until a qualified candidate is identified.
• #LI-VG1 #LI-VG