Sr. Privacy Compliance Analyst

The Standard • Portland, OR

1d • $76,250 - $111,500

About The Position

The Senior Privacy Compliance Analyst serves as the organization’s subject matter expert and point of contact for privacy incident response and handling. The role leads the intake, investigation, risk assessment, notification, and resolution of privacy incidents, and monitors evolving privacy and data protection requirements, translating regulatory obligations into practical business processes, guidance, and controls.

The analyst partners with legal, information security, IT, product, operations, claims, and service teams to ensure incidents are promptly identified, escalated, investigated, contained, and remediated in compliance with applicable legal, regulatory, and contractual requirements. The role also supports audits and regulatory inquiries, develops incident-response materials and training, and uses metrics and trend analysis to strengthen the privacy compliance program.

Requirements

• Bachelor’s degree or equivalent experience; a business, legal, or related field is preferred.
• 4–6+ years of experience in privacy, fraud, or information security.
• Demonstrated experience handling privacy and security incidents from intake through investigation, risk assessment, notification, and closure.
• Ability to translate complex regulations into practical guidance.
• Ability to manage complex work, assess risk, and meet deadlines in a detail-oriented, time-sensitive environment.
• Basic knowledge of federal and state privacy, data protection, and breach notification requirements.
• Excellent verbal and written communication skills and ability to build trust and effective partnerships with internal and external stakeholders.
• Ability to manage competing priorities, work autonomously, and exercise judgment and discretion in time-sensitive incident situations.
• Strong analytical, critical-thinking, and problem-solving capabilities.
• Ability to partner cross-functionally to provide solutions that meet customer objectives while maintaining compliant processes and controls.

Nice To Haves

• Professional privacy, compliance, or security certification, such as CIPP/US, CIPM, or CISSP, or similar.
• Experience coordinating incident response with information security, legal, and third-party vendors, including managing regulator inquiries following an incident.
• Experience developing playbooks, training materials, and compliance guidance.

Responsibilities

• Lead and coordinate privacy incident response from intake and triage through investigation, containment, remediation, and closure; escalate incidents appropriately and maintain accurate records and reporting.
• Assess incident scope and risk, determine applicable regulatory, contractual, or individual notification obligations, and draft and coordinate required notifications within relevant timeframes.
• Conduct root cause analyses, identify control gaps and trends, and recommend and track corrective and preventive actions to completion.
• Advise business units, legal, and information security on incident handling and privacy compliance, including incidents involving third-party vendors; research complex questions using internal and external resources.
• Draft, update, maintain, and improve incident-response policies, procedures, playbooks, job aids, training materials, and compliance guidance.
• Monitor, analyze, and interpret privacy, data protection, and breach notification laws and regulations, and communicate their business implications to stakeholders.
• Participate in industry forums and meetings to monitor incident-response trends and maintain productive relationships with industry contacts.
• Support internal audits, regulatory examinations, and regulator inquiries by organizing documentation, responding to inquiries, and assisting with corrective action plans.
• Deliver training, presentations, and guidance on incident reporting and response requirements and emerging regulatory trends.
• Develop and maintain privacy incident metrics, trend analyses, and reports to identify recurring risks, evaluate response effectiveness, and support continuous improvement.
• Identify opportunities to strengthen privacy controls, operational procedures, and preventive measures based on incident findings, regulatory developments, and emerging privacy risks.

Benefits

• Medical, dental, and vision benefits.
• 401(k) plan with matching company contributions.
• Annual incentive bonus plan.
• Paid time off, including 11 holidays, 2 wellness days, and 8 volunteer hours annually; PTO increases with tenure.
• Paid parental leave.
• Adoption and surrogacy assistance.
• Employee giving program that double matches donations to eligible nonprofits and schools.
• Opportunities for career growth and advancement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior