Privacy Analyst

|Current USA TODAY Co. Employees- Please ensure you are using our abbreviated process on the internal Careers site by logging into Dayforce through MyApps| 

USA TODAY Co., Inc. is a diversified media company with expansive reach at the national and local level dedicated to empowering and enriching communities. We seek to inspire, inform, and connect audiences as a sustainable, growth focused media and digital marketing solutions company. Through our trusted brands, including the USA TODAY NETWORK, comprised of the national publication, USA TODAY, and local media organizations, including our network of local properties, in the United States, and Newsquest, a wholly-owned subsidiary operating in the United Kingdom, we provide essential journalism, local content, and digital experiences to audiences and businesses. We deliver high-quality, trusted content with a commitment to balanced, unbiased journalism, where and when consumers want to engage. Our digital marketing solutions brand, LocaliQ, supports small and medium-sized businesses with innovative digital marketing products and solutions. USA TODAY Co. open roles are featured on various external job boards. When applying to a position at USA TODAY Co., you should be completing an application on USA TODAY Co. Careers via Dayforce. Job postings directing you to complete an application on other external sites may not be valid. If you are a California resident, you acknowledge that by applying for a job with us, this California Job Applicant Privacy Notice will apply to our collection, use, and disclosure of your personal information. To connect with us, visit www.usatodayco.com 

The position of Privacy Analyst in the Gannett Privacy Office will fulfill a critical role in supporting Gannett’s privacy program to comply with privacy laws, mitigate risk, and build trust with our customers and consumers.

Conduct architecture reviews of the ad tech stack and provide privacy guidance to our ad tech teams
•    Analyze system designs and data flows to identify and mitigate potential privacy vulnerabilities
•    Providing privacy support for security incident response, triaging privacy incident investigation, and supporting the Gannett Privacy Office in related breach response
•    Assisting in the development and maintenance of privacy content for the company’s privacy intranet
•    Support assessments of third-party vendors for privacy compliance
•    Website cookie Scanning management
•    Stay current with international and domestic privacy laws and regulations, including GDPR, CCPA, HIPAA, and others relevant to our industry.
•    Help manage the OneTrust suite of privacy modules used by Gannett
•    Help to maintain records of data processing activities, data protection impact assessments to demonstrate compliance with applicable data protection laws
•    Support responding to data subject rights requests
•    Managing program metrics and reporting
•    Ad-hoc activities, as required

Strong understanding of data protection laws and regulations (e.g., GDPR, CCPA/CPRA)
•    Strong understanding of data privacy principles, risk assessment, and mitigation.
•    IAPP certification(s) (CIPM, CIPP, CIPT), or ISO27001 certification(s), or ISACA Privacy Certification 
•    OneTrust certification
•    Familiarity with Privacy by Design principles
•    Experience with conducting impactful reviews (PIAs, audits, process evaluations, gap assessments, etc.).
•    Experience with Privacy Enhancing Technologies (PETs) and infrastructure for enabling data analysis in a privacy-conscious manner, including sharing business insights with customers and advertisers
•    Knowledge of the ad tech ecosystem preferred
•    Experience with technical privacy concepts (e.g., anonymization, encryption, differential privacy)
•    Bachelor’s degree
•    3-5 years of experience in privacy compliance

#LI-REMOTE

#LI-NR2

The annualized base salary for this role will range between $90,000 and $110,000.  Base compensation is reflective of many factors, including, but not limited to, the market in which one lives/works, individual education level, skills, certifications and experience. Note: variable compensation is not reflected in these figures and based on the role, may be applicable.