Cybersecurity Business Analyst Data Risk - Multiple Offices (Hybrid)

The Cybersecurity Business Analyst - Data Risk, is responsible for identifying, analyzing, and helping remediate risks to the firm’s sensitive and regulated data throughout its lifecycle. The role bridges security, privacy, compliance, and business teams—translating data protection requirements into actionable controls, clear reporting, and prioritized risk decisions that reduce exposure while enabling the business. This is a hybrid position and can be resident in Phoenix, AZ; Atlanta, GA; Minneapolis, MN; Seattle, WA; Charlotte, NC; Miami or Orlando, FL; or Dallas, TX, with an onsite expectation of once per month. Pursuant to Washington and Minneapolis regulations, the salary range is $137,800 to $151,600 annually and includes eligibility for performance-based bonuses. Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate. We offer generous compensation and benefits packages. For more information visit: Responsibilities Data risk analysis and assessment Maintain an inventory of sensitive and regulated data, data flows, systems, and third-party sharing. Conduct data risk assessments covering confidentiality, integrity, availability, and regulatory exposure. Analyze data classification, access, retention, and handling to identify gaps and control weaknesses. Quantify and prioritize data risks, and track remediation activities through to closure. Data governance and controls Support data classification, DLP, and data protection policies and standards. Translate privacy and regulatory requirements (e.g., GDPR, CCPA, HIPAA where applicable) into data control requirements. Partner with control owners to define, document, and validate data safeguards. Monitor control effectiveness and produce metrics on the firm’s data risk posture. Requirements, reporting, and analysis Gather and document business and security requirements for data protection initiatives. Build dashboards and reports on data risk, exposure, and remediation progress for leadership. Perform root-cause and trend analysis on data incidents, DLP alerts, and access anomalies. Support audits and client assessments with data risk evidence and documentation. Stakeholder enablement and collaboration Serve as a liaison between Security, Privacy, Risk, IT, and business stakeholders. Translate technical data risks into clear business language and actionable recommendations. Provide guidance that helps teams handle data safely and meet compliance obligations. Support response to data-related incidents, findings, and control failures. Qualifications Preferred qualifications Experience in a legal, professional services, or other highly regulated environment. Familiarity with data governance and risk platforms (e.g., OneTrust, Microsoft Purview, ServiceNow). Comfort with data analysis and visualization tools (e.g., Excel / Power BI) and basic querying (e.g., SQL). Certifications Core security / risk: CISM, CRISC, or CISSP. Data / privacy: CIPP, CIPM, or CDPSE. Governance / analysis: ISO/IEC 27001 lead implementer/auditor or a recognized business analysis certification (e.g., CBAP). About Littler Littler is the largest global employment and labor law practice in the world exclusively devoted to representing management. With more than 1,900 attorneys in over 100 offices worldwide, Littler serves as the single source solution provider to the global employer community. Consistently recognized in the industry as a leading and innovative law practice, Littler has been litigating, mediating and negotiating some of the most influential employment law cases and labor contracts on record for over 75 years. Littler’s unparalleled commitment to labor and employment law helps clients navigate a complex business world with nuanced legal issues—building better solutions for clients’s toughest challenges. With deep experience and resources that are local, everywhere, Littler is fully focused on its clients. With a diverse team of the brightest minds, Littler fosters a culture that celebrates original thinking. And with powerful proprietary technology, Littler disrupts the status quo—delivering bold, groundbreaking innovation that prepares employers not just for what’s happening today, but for what’s likely to happen tomorrow. Benefits We offer a generous benefits package to full-time and part-time employees working at least a 50% schedule. Benefits include comprehensive health, dental and vision plan for you, your spouse/domestic partner and children. In addition, we provide a superior 401(k) plan, ample time off programs, mental health programs, family building and caregiving, generous paid parental leave, life insurance, disability insurance, a wellness program, flexible spending accounts, and an employee referral bonus program. For more information about our benefits visit: For more information about our firm visit: #J-18808-Ljbffr Littler Mendelson