Sr. Privacy Analyst

The Privacy Analyst’s primary responsibility is to serve as an internal point of contact for all privacy matters within the information technology department. In this role, the privacy analyst will proactively monitor, interpret, and communicate changes in data privacy regulations across all regions where SEI operates, supporting the SEI legal department. The Privacy Analyst manages all privacy technology and processes like DSARs, RoPA, PIA, Vendor and Third-Party Oversight, Training and Awareness, Audit and Reporting, Regulatory Monitoring, and Privacy-by-Design Practices.

The Analyst will manage third party vendors managing privacy and technology providers in the data privacy space. This role partners with cross-functional teams, including Legal, IT, Security, HR, and Marketing, to embed privacy-by-design principles, scale compliance practices, and anticipate evolving regulatory requirements.

Essential Duties and Responsibilities:

Program Implementation

• Coordinate privacy initiatives across SEI, ensuring policies and practices align with global regulations.
• Embed privacy-by-design practices across business processes in collaboration with Legal, IT, Security, and HR.

Privacy Vendor Oversight

• Manage privacy technology platforms (e.g., OneTrust), serving as the primary liaison for issue resolution, integration, and optimization.
• Oversee third-party and vendor relationships, ensuring contracts (including DPAs), escalations, and performance meet privacy and compliance requirements.
• Partner with privacy and technology providers to identify solutions, drive accountability, and maximize program value.

Regulatory Monitoring

• Track, interpret, and forecast global privacy laws (GDPR, CCPA/CPRA, FERPA, HIPAA, EU, and other regions).
• Provide compliance guidance and risk assessments based on emerging regulatory requirements.

Project Leadership

• Lead privacy-related projects from planning through execution, ensuring accountability and timely delivery.
• Conduct and maintain RoPA, PIAs, and risk assessments to identify and mitigate potential issues.

Additional Duties

• Develop and deliver privacy training and awareness programs across the organization.
• Support and contribute to audits, documentation, and program reporting.
• Identify opportunities for continuous improvement in SEI’s privacy program.

Job Skills:

• Privacy-By-Design Methodologies: Expertise in embedding privacy-by-design principles and methodologies, ensuring these principles are incorporated into organizational processes, vendor engagements, and privacy program initiatives.

• AI and Machine Learning: Understanding of AI and machine learning models, with a focus on identifying and addressing privacy implications, data use limitations, and ethical considerations.

• Knowledge of Privacy Regulations: Familiarity with GDPR, HIPAA, FERPA, CCPA/CPRA, and other state-level or global privacy regulations. Ability to align program management activities, vendor oversight, and company policies with evolving legal requirements

• Data Literacy: Strong skills in understanding, interpreting, and working with data, including identifying privacy risks in data collection, management, and use.

• Vendor & Partner Management: Proven ability to manage external vendors and technology partners, ensuring accountability, quality, and compliance with privacy requirements.

• Project Management: Skilled in developing and maintaining project plans, tracking deliverables, and coordinating cross-functional initiatives to support privacy objectives.

In addition to the qualifications above, the candidate should possess the following skills:

• Strong analytical and problem-solving abilities.
• Excellent communication skills (both verbal and written), capable of influencing without authority.
• Ability to balance risks in ambiguous and complex situations.
• Proven teamwork and collaboration skills, especially in leading or contributing to global and cross-functional teams.
• A high level of motivation to contribute and grow within a complex and evolving private landscape.
• Strong organizational and stakeholder management skills.
• Ability to interpret numeric data and apply statistical principles in risk analysis and program reporting.

Work Experience:

• 5+ years of experience in privacy/compliance role or related fields.
• Experience managing global privacy regulations across U.S., Europe, Australia and beyond.
• Vendor management and contract review experience, including DPAs.