Privacy & Data Protection Analyst (5985)

NextPath Workforce Solutions is currently seeking a Privacy & Data Protection Analyst to join our client's team in Atlanta, GA . This is a hybrid, direct hire position.

SALARY: $140,000 + $150,000 + bonus (depending on experience)
Unfortunately, at this time our client is unable to sponsor or transfer visas. Only candidates authorized to work in the US without sponsorship should apply.

REQUIREMENTS

• 3+ years of experience supporting privacy, data protection, or regulated data governance programs
• Familiarity with privacy and security frameworks such as HIPAA, GDPR/UK GDPR, U.S. state privacy laws, NIST, ISO 27001, NIST 800-171, or CMMC
• Privacy, security, or risk certifications such as CIPP/US, CIPP/E, CIPM, CIPT, CISSP, CISA, CISM, CRISC, or related credentials preferred
• Experience in a law firm, professional services, regulated industry, or client-service environment

RESPONSIBILITIES

• Support the firm's privacy program, including coordinating Privacy Committee meetings and maintaining governance documentation
• Review and negotiate vendor and client privacy requirements, including Data Processing Agreements, data transfer terms, and privacy provisions within client agreements
• Assess how vendors and software tools handle sensitive privacy-related information as part of third-party risk management
• Complete client privacy and AI assessments, working with internal teams to demonstrate controls and ensure client confidence
• Manage operational privacy processes, including data subject access requests, cookie and consent management, privacy notices, and policy updates
• Lead governance activities for sensitive information types such as PHI and CUI, advising teams on handling and supporting compliance initiatives and audits
• Analyze high-risk matters involving PII, PHI, or sensitive regulatory data and advise on appropriate data handling and protection measures
• Stay updated on relevant privacy and data protection regulations across jurisdictions and translate changes into practical guidance
• Own core privacy governance activities within privacy management tools, including assessments, data flow documentation, risk tracking, remediation, and stakeholder guidance

We are an Equal Opportunity Employer.

#LI-Hybrid
#LI-DV1