Data Protection Analyst II

This role will partner with business, technology, security, data governance, legal, and third-party stakeholders to identify privacy, data protection, and information security risks and translate regulatory requirements into practical operational and technical controls. Support privacy-by-design and privacy engineering initiatives, including data minimization, pseudonymization, anonymization, consent/preference management, retention, access controls, and monitoring.

Kforce has a client seeking a Data Protection Analyst in Fort Lauderdale, FL. The Data Protection Analyst will support third-party risk management, Data Subject Access Request (DSAR) operations, privacy engineering, and privacy program initiatives. This role will partner with business, technology, security, data governance, legal, and third-party stakeholders to identify privacy, data protection, and information security risks and translate regulatory requirements into practical operational and technical controls. Responsibilities:

• Manage end-to-end DSAR processing and ensure requests are completed accurately and within applicable timelines
• Conduct third-party privacy risk assessments, review vendor documentation, document findings, and track remediation
• Support privacy-by-design and privacy engineering initiatives, including data minimization, pseudonymization, anonymization, consent/preference management, retention, access controls, and monitoring
• Assist with enterprise data mapping, including data flows, systems, processing purposes, vendors, and controls
• Conduct Data Protection Impact Assessments (DPIAs) and related privacy risk assessments

Research U.S. and global privacy regulations and translate requirements into actionable controls

• Support development of privacy policies, procedures, standards, templates, and guidance
• Maintain program trackers, document decisions, monitor control implementation, prepare status updates, and escalate risks

Requirements:

• Bachelor's degree or equivalent experience in MIS, CIS, Computer Science, Cybersecurity, Law, or a related discipline
• Preferred: CIPP/US, CIPP/E, CIPM, CIPT, or related privacy/security certification
• 3+ years of experience in data protection, privacy, compliance, risk management, or a related field
• Strong knowledge of U.S. and global privacy, data protection, and information security requirements
• Hands-on experience processing DSARs and coordinating privacy requests across multiple stakeholders
• Experience supporting privacy risk assessments, DPIAs, third-party risk, or privacy compliance activities
• Ability to translate privacy and regulatory requirements into business, vendor, and technical controls
• Strong organizational, documentation, research, and analytical skills with excellent attention to detail
• Strong written and verbal communication skills with the ability to communicate with business and technical stakeholders
• Ability to manage multiple priorities and sensitive/confidential information
• Preferred: Experience with GRC platforms, data posture management, consent/preference management, and privacy compliance tools
• Proficiency with Microsoft Office, including Excel, Word, PowerPoint, and OneDrive