Privacy Program Analyst

Kalles Group • Seattle, WA

2d • Onsite

About The Position

The Privacy Program Analyst will be part of our team of skilled, collaborative practitioners supporting privacy programs across a range of enterprise clients. You'll lead privacy assessments, strengthen data governance practices, and help clients build durable, well-documented privacy programs as a key component of our growing Privacy & Compliance practice. If you are passionate about protecting people's data, grounded in privacy fundamentals, and experienced in leading privacy impact assessments and cross-functional risk work, we want to speak with you!

Requirements

• 3+ years of experience in privacy, risk, or compliance-related work, with hands-on experience conducting privacy impact assessments.
• Bachelor's degree in information technology, computer science, cybersecurity, or related experience required.
• Strong foundational understanding of privacy principles (e.g., Fair Information Practice Principles) and core privacy controls such as retention schedules and least-privilege access, well-rounded fundamentals matter more to us than mastery of any single tool.
• Working knowledge of relevant privacy regulations (e.g., CCPA, PIPEDA, and other U.S. state or sectoral privacy laws) and comfort navigating evolving regulatory landscapes.
• Strong attention to detail and consistency in both written and verbal communication.
• Comfortable working across multiple concurrent workstreams and adapting as program priorities shift.

Nice To Haves

• IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred.
• Experience with privacy management platforms (e.g., OneTrust, TrustArc) a plus.
• Past experience conducting privacy assessments in complex, matrixed enterprise environments.
• Relevant experience within e-commerce, retail, or large-scale consumer-facing organizations.
• Experience supporting global or multi-jurisdictional privacy programs.
• A broad view of privacy that connects naturally to adjacent disciplines like security, data governance, and IT risk.

Responsibilities

• Lead end-to-end privacy impact assessments (and related assessments such as DPAs), including evaluation of first- and third-party applications, systems, and business processes, identifying privacy and technological gaps against applicable laws and business requirements.
• Evaluate privacy risks and document clear, actionable mitigation recommendations for partner teams to execute.
• Collaborate closely with Legal, IT, and Security teams to ensure privacy controls stay aligned with an evolving risk and compliance posture.
• Identify opportunities to improve privacy assessment processes, data mapping practices, and documentation, escalating recommendations to leadership as appropriate.
• Support audits, maturity assessments, and other program-level compliance initiatives.
• Respond to and help fulfill data subject access requests (DSARs).
• Maintain and build out data mapping and governance documentation.
• Support the rollout of privacy-enhancing technologies and tools.
• Identify and escalate privacy risks, and help lead incident response for privacy-related events.
• Flex across multiple privacy workstreams as program needs evolve, bringing the same grounded, principles-based approach to each.

Benefits

• Medical, dental, vision, and pharmaceutical coverage.
• An education stipend of $2,000 annually to put towards your own growth and development.
• 401(k) and life insurance benefits.
• 3 weeks of Paid Time Off.
• 8 paid company holidays and 2 flexible holidays for anything you want to celebrate!
• Work/life balance – we know there's more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.
• Opportunities to connect in person and remotely with a passionate, supportive team.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level