Risk Analyst III (6169)

itD is seeking a Risk Analyst III to support global privacy compliance operations by managing high-volume People Data Subject Rights (DSR) requests and ensuring secure, compliant handling of sensitive personnel data. This role plays a critical part in maintaining the stability and responsiveness of the organization’s DSR program by partnering closely with program leadership and cross-functional stakeholders to meet global regulatory requirements and service-level commitments. The ideal candidate will bring hands-on experience in privacy compliance, risk management, or data protection operations, along with a proven track record of executing process-driven workflows with accuracy, confidentiality, and operational excellence.

• →Manage the end-to-end lifecycle of high-volume People Data Subject Rights (DSR) and Subject Access Requests (SAR) with a strong focus on accuracy, confidentiality, and compliance.
• →Ensure all data requests are processed in alignment with global privacy regulations, including GDPR, CCPA, and other international data protection requirements.
• →Partner with internal stakeholders to securely retrieve, review, redact, and deliver personnel data while identifying and mitigating privacy-related risks.
• →Maintain detailed audit trails and documentation for all requests to support compliance reviews and regulatory obligations.
• →Collaborate with Program Managers and operational teams to maintain SLA adherence and ensure ongoing program stability.
• →Execute structured case management workflows and support process improvements within privacy operations.
• →Monitor and escalate potential compliance or operational risks impacting request resolution timelines or data integrity.

• →Attend regular internal practice community meetings.
• →Collaborate with your itD practice team on industry thought leadership.
• →Complete client case studies and learning material (blogs, media material).
• →Build out material to contribute to the Digital Transformation practice.
• →Attend internal itD networking events (in person and virtual).
• →Work with leadership on career fast-track opportunities.

• 2–5 years of professional experience in risk management, privacy compliance, data protection, or related operational workflows.
• Strong foundational knowledge of global privacy and data protection regulations, including GDPR and CCPA.
• Experience managing high-volume, process-oriented case management workflows with strong attention to detail and accountability.
• Ability to handle sensitive and confidential employee or personnel data securely and accurately.
• Experience collaborating cross-functionally with internal stakeholders to support compliance operations and issue resolution.
• Strong documentation, audit tracking, and organizational skills.
• Bachelor’s degree required.

• Direct experience managing DSRs, SARs, or privacy-related requests in a corporate environment.
• Familiarity with HR data structures and privacy automation tools.
• Experience supporting U.S. and/or European privacy law compliance initiatives.
• CIPP/E, CIPP/US, or similar privacy certifications.
• Background supporting operational privacy or compliance programs within large-scale organizations.

• Bachelor’s degree in a relevant field or equivalent work experience required.