GRC Analyst II

Overview:

TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. The below job opportunity is to one of Our clients Who is a fashion specialty retailer founded on a simple idea: offer each customer the best possible service, quality, value, and selection. We are looking for an individual to provide specialized Information Technology support for our strategic business partners within the client Corporate Center.

Job Title: GRC Analyst II



Location: Seattle,WA 98101



Duration: 3 Months

Job Type: Temporary Assignment



Work Type: Hybrid

Job Description :

• Lead end-to-end privacy impact assessments, including assessments of first- and third-party applications, systems and business processes, and identification of privacy and technological considerations and gaps based on applicable laws, regulations and business requirements
• Evaluate complex privacy risks and document recommended mitigation strategies for partner teams to execute.
• Collaborate with cross-functional teams to implement effective privacy controls Collaborate with Legal, IT, and Cybersecurity teams to ensure privacy controls are aligned and reflect ongoing changes to Nordstrom risk and compliance posture
• Identify opportunities for operational improvements in privacy assessment processes, data mapping tools, and documentation, escalating implementation decisions to leadership as appropriate
• Assist with audit or maturity assessment initiatives Respond to and fulfill complex data subject access requests (DSARs)
• Maintain and supplement data mapping and governance documentation Support rollout of privacy-enhancing technologies and tools Identify and escalate potential privacy risks or threats and recommend mitigation strategies Lead incident response processes for privacy-related events

Experience:

• 2+ years of privacy or related experienc

Certifications:

• IAPP certification (CIPP/US, CIPM, or CIPT) strongly preferred

Skills:

• Strong working knowledge of Canadian (PIPEDA) and U.S. state-level privacy regulations (CCPA, OCPA, Colorado AI Act, Illinois BIPA) and sectoral privacy laws (e.g. CASL, FCRA, HIPAA, CAN-SPAM, COPPA). Experience with privacy management platforms (e.g. OneTrust, TrustArc). Strong attention to detail, quality and consistency in both written and verbal communications

Education:

• Bachelor's degree or master's in information technology, Computer Science, Cybersecurity or related experience required.

TekWissen Group is an equal opportunity employer supporting workforce diversity.