Privacy Analyst

About the Role

Fivetran is building data pipelines to power the modern data stack for thousands of companies.

We’re looking for a Privacy Analyst to join our global SaaS company and growing legal team. This non-attorney role will report directly to the Data Protection Officer and will serve in a leading privacy role in the organization. They will be responsible for the company’s global data protection compliance program and there is potential for huge impact across our rapidly-growing global company. The successful candidate will possess strong technical acumen given the strategic nature of the role, have a right-sized risk calculus, and fluid communication skills.

A risk-adjusted privacy analyst with a technical, process, and operations-orientation to help educate and build the business as Fivetran scales. As a member of the Legal team and working with the Legal team to build and scale a world-class legal organization, you will have primary responsibility for building, maintaining and improving the global privacy and data protection compliance programs at Fivetran.

This will include staying informed of peer company best practices and relevant global data protection developments, coordinating with our privacy attorneys to gauge applicability to the company's activities and objectives and advising the business on how to promote the company's goals while complying with applicable regulations. Your expertise will drive creative, customer-focused, practical and proactive guidance.

Fivetran is a start-up company where everyone rolls up their sleeves and digs in to work, and this role is no different. You will be an analyst on privacy and data protection compliance initiatives.

This is a full-time, hybrid position based out of our Oakland or Denver offices. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team.

Technologies You’ll Use

Ironclad, Salesforce, Onetrust, Relyance AI, Trelica, Slab, Jira, Java, Postgres, Oracle, SQL Server, MySQL, Kubernetes, Docker, AWS, GCP, CircleCI, Zendesk, Docker, Grafana, DBeaver, Cortex Cloud

What You’ll Do

• Manage projects related to ongoing compliance with privacy and data protection laws across business areas

• Help develop, maintain, and scale processes, policies, procedures, technical controls, and playbooks that support global privacy and data protection program

• Utilize project management and communication skills to help define scope, requirements, analyze data, and develop technical recommendations for program and operational execution

• Drive greater consistency of process, practices, and execution across company-wide privacy and data protection work-streams

• Work closely with privacy team members to further privacy governance, monitoring, reporting, and auditing on the ongoing initiatives of the privacy and data protection program

• Develop the privacy and data protection program for a global technology company and ability to lead the continued development, maintenance and improvement of Fivetran’s global privacy program including effective policies, procedures, technical safeguards, and documentation

• Contribute to a fast-paced environment and execute change management

• Work cross-functionally throughout the organization including with product, security, engineering teams

• Support the development of the strategy, delivery, and evaluation of the privacy program and data protection compliance

• Embody process and relationship-building skills to accomplish the mission

Skills We’re Looking For

• Understanding of technical issues (cookie management, encryption)

• Experience writing business, functional, and technical requirements with specifications, including strong documentation skills

• Strong data analysis and project management skills

• Engineering background preferred, but not required

• You love privacy-related work and view protecting privacy rights not as a compliance obligation, but as the right thing to do

• You love working with product strategy and engineering

• Experience with privacy regulations and industry standards, including GDPR, CCPA, CPRA, ISO27701, PCI-DSS, NIST, EU Data Act, EU NIS2, and UK NIS.

Bonus Skills​

• CIPP, CIPM, or CIPT preferred, but not required

#LI-HYBRID #LI-SE1