Privacy Audit Analyst - IT Controls & Compliance

Description :

Job Summary :

The Senior Associate Privacy Audit Analyst leads end-to-end privacy audit engagements, mentors junior staff, and drives complex assessments across global data privacy and U.S. health data regulations. This position emphasizes independent ownership of audit planning, execution, and stakeholder management, with control testing serving as a supporting activity.

Key Responsibilities :

- Lead the design and execution of privacy audit programs covering GDPR, LGPD, DPDP, and HIPAA.

- Perform in-depth privacy risk assessments and gap analyses against UCF, NIST, ISO 27001 frameworks.

- Drive end-to-end audit activities : scoping, fieldwork, testing IT controls (access, encryption, infrastructure), and reporting.

- Communicate findings and remediation plans to senior stakeholders, control owners, and application teams.

- Mentor and guide Associate-level auditors in audit methodology and deliverable quality.

- Continuously refine audit methodologies and tools to enhance efficiency and coverage.

Qualifications and Skills :

- Bachelors degree in Information Security, IT, Law, or a related discipline.

- 46 years of progressive experience in privacy or IT audit, risk management, or compliance.

- Expert knowledge of GDPR, LGPD, DPDP and HIPAA requirements.

- Deep understanding of PII protection, IT security concepts, and cybersecurity best practices.

- Proven track record conducting privacy risk assessments and identifying compliance gaps.

- Hands-on experience with UCF, NIST, ISO 27001 frameworks.

- Strong stakeholder communication and project leadership skills.

- Ability to work independently, prioritize tasks, and deliver high-quality results under tight deadlines.

Nice to Have :

- Advanced certifications : CIPP/E, CIPP/US, CIPM, CISA, or CISSP.

- Prior audit experience in healthcare or life sciences organizations.

- Proven functional and automation testing background, including test strategy and execution.

- Proficiency with test automation frameworks (e.g., Tosca, Selenium, JUnit).

- Experience integrating testing artifacts into audit workflows.

- Familiarity with privacy automation platforms and data discovery tools.

- Demonstrated ability to innovate audit processes and leverage analytics.