Privacy Analyst

Privacy Analyst Opportunity in Financial Services

Privacy Analyst

Locations:

Atlanta: 2300 Windy Ridge Pkwy SE, Suite 750, Atlanta, GA 30339

La Vista: 12325 Port Grace Blvd, La Vista, NE 68128

Oakdale: 7755 3rd St. N, Oakdale, MN 55128

Scottsdale: 18700 N Hayden Rd, Suite 255, Scottsdale, AZ 85255

St. Petersburg: 877 Executive Center Dr. W, Suite 300, St. Petersburg, FL 33702

Osaic is not considering remote candidates at this time.

Osaic has returned to the office on a hybrid schedule requiring a minimum of 4 days weekly in the office. Applicants should be located at one of our hubs listed above and must be willing to work this schedule.

Role Type: Full-time

Salary: $70,000 - $94,000 base salary + annual performance bonus

Actual compensation offered will be determined individually, based on a number of job-related factors, including location, skills, licensure, experience, and education.

Our competitive compensation is just one component of Osaic's total compensation package. Additional benefits include health, vision, dental insurance, 401k, paid time away, volunteer days and much more.

Summary:

We are seeking a Privacy Analyst to support and enhance the firm's enterprise privacy and data protection program within a regulated wealth management environment. This role plays a critical operational and advisory function, supporting incident response, consumer privacy rights, regulatory inquiries, and strategic privacy initiatives across the organization.

The ideal candidate has a strong background in privacy, compliance, or regulatory matters within financial services and is comfortable serving as a privacy subject matter expert for home-office business partners and financial advisors.

Education Requirements:

Bachelor's degree preferred. In lieu of a degree, a high school diploma (or equivalent) combined with significant practical experience will be considered.

Responsibilities:

Incident Response & Branch Office Support

• Triage, scope, and respond to branch office privacy and data incidents, coordinating with Compliance, Information Security, Legal, and business stakeholders.
• Perform privacy and breach analysis of incidents and determine notification obligations under GLBA, Regulation S?P, and applicable state privacy laws.
• Draft and support delivery of client, consumer, and regulatory breach notifications, when required.

Privacy Operations & Intake

• Monitor and respond to the firm's Privacy inbox, serving as the lead for privacy-related inquiries.
• Respond to privacy-specific consumer complaints, coordinating with Compliance if appropriate.
• Maintain documentation and evidence to support defensible privacy decision-making.

Data Subject & Consumer Rights

• Maintain and fulfill privacy and data subject access rights requests, including requests under Regulation S?P and applicable state privacy laws.
• Coordinate request intake, validation, scoping, response preparation, and tracking within required timeframes.

Regulatory, Audit & Inquiry Support

• Help operationalize privacy obligations under GLBA, SEC Regulation S?P, CPRA/CCPA and other state privacy laws, and related regulatory guidance.
• Support responses to SEC, FINRA, and state regulatory examinations, internal audits, and compliance reviews involving data protection and privacy controls.

Privacy Governance & Program Support

• Support critical privacy functions, including privacy by design, privacy impact assessments (PIAs/DPIAs), and risk assessments for new systems, vendors, and initiatives.
• Participate directly in privacy-related strategic initiatives, including enhancements to privacy governance, advisor oversight, vendor risk management, and emerging technology controls.
• Perform other duties as assigned in support of the enterprise privacy program.

Basic Requirements:

• Six (6) or more years of experience in public policy, regulatory compliance, or legal roles involving financial services, data privacy, data protection, cybersecurity, or cybercrime.
• Strong understanding of legal, regulatory compliance, and/or public policy issues related to data privacy, data protection, and cybersecurity.
• Foundational knowledge of current privacy laws, regulations, and principles, with a demonstrated ability and willingness to learn and adapt in a rapidly evolving regulatory environment.
• Excellent written, verbal, and listening communication skills, with the ability to engage effectively across all levels of the organization.
• Strong analytical, problem-solving, and decision-making skills, with the ability to manage multiple priorities and workstreams simultaneously.
• Demonstrated ability to build and maintain effective working relationships with internal and external stakeholders.
• High degree of integrity, judgment, and objectivity when balancing business objectives with risk and compliance considerations.
• Proficiency with Microsoft Office applications and strong general computer skills.
• Exceptional attention to detail and organizational skills.
• Ability to work independently as well as collaboratively within cross-functional teams.
• Flexibility and adaptability in a dynamic and changing environment.