Data Privacy Lead Analyst - C13 - HEREDIA

Data Privacy Lead Analyst - C13 - HEREDIA Job Req Id: 26975953 Location: Heredia, Provincia de Heredia, Costa Rica Job Type: Hybrid Posted: Jul. 02, 2026 Job Overview The Data Privacy Lead Analyst is responsible for facilitating and executing day‑to‑day activities to support governance and oversight, operational risk management, and controls leadership within the Data Transfers Office. The role includes supporting privacy and cross‑border related capabilities and requirements, ensuring compliance with Citi Global Privacy Policy and Citi Cross Border Data Standards, and identifying and managing operational risks associated with privacy and cross-border data transfers. The analyst works across the business to ensure effective controls and monitoring are in place to reduce risk. Responsibilities Engage in assessment of privacy impact processes and cross‑border related controls required for all initiatives, new products and services Assess, evaluate, and validate controls through processes and tools such as the MCA and KRIs as appropriate for data privacy risk Support the Business and Functions on reviews and audits of data privacy and cross‑border data transfers, and on responding to findings Manage day‑to‑day activities that support the implementation of global policy requirements and regional standards, and assess legal and regulatory requirements with Country Legal and Compliance, developing local procedures related to cross‑border and data privacy Coordinate periodic reviews of the business’s data privacy processes, cross‑border data transfers and controls, and validate changes resulting from such reviews Track and review deviations and risk acceptances when raised and at the time of renewal to assess the need for deviations and ensure compensating controls are documented Follow escalation policy and procedures to ensure effective escalation and socialization of material risk events and issues across businesses for any data privacy related items Provide input and review of completed cross‑border data clearance CAPs in the tracking system prior to validation by other control and assessment functions such as Internal Audit and ORM Coordinate and support the business in the implementation of global, regional and local data privacy, regulatory and risk and control projects Ensure high‑quality execution of data privacy and cross‑border data transfer programs for any Citi‑initiated programs, in coordination with Global Risk and Control and the In‑Business Regulatory Engagement Head Develop and implement training on risk and control concepts, processes, tools, and related operator effectiveness Qualifications 8–12 years of relevant experience Experience in data privacy, data privacy operations, information security, or cyber‑related risk management, or at least two years in an internal audit, risk management, or control management role Working knowledge of data privacy compliance laws, rules, regulations, risks, and appropriate controls; familiarity with privacy‑related technology considerations such as cookies, mobile devices, biometrics, and geolocation data is desired Risk‑based thinking and analytical mindset Ability to lead and drive controls across products and functions irrespective of reporting lines Effective communication, including developing and delivering multi‑mode communications that convey a clear understanding of unique needs of different audiences; ability to drive consensus and influence relationships at all levels Strong collaboration skills, building partnerships and working well with others to meet shared objectives Up‑to‑date understanding of key data privacy risk and control concepts, tools and trends Experience managing and implementing successful projects Proficiency in basic Microsoft applications (Word, Excel, PowerPoint) Education Bachelor’s/University degree; Master’s degree preferred; privacy certification preferred but not required Job Family Group: Data Governance Job Family: Data Privacy & Data Transfers Time Type: Full Time Most Relevant Skills: Controls Management, Digital Skills, Escalation Management, Laws and Regulations, Policy and Procedure, Process Execution, Program Management, Regulatory Management, Risk Management Culture, Risk Management Lifecycle Citi is an equal‑opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation, please contact us for support. View Citi’s EEO Policy Statement and Know Your Rights poster. #J-18808-Ljbffr Citi