Data Protection Analyst II

Kforce has a client seeking a Data Protection Analyst in Fort Lauderdale, FL. The Data Protection Analyst will support third-party risk management, Data Subject Access Request (DSAR) operations, privacy engineering, and privacy program initiatives. This role will partner with business, technology, security, data governance, legal, and third-party stakeholders to identify privacy, data protection, and information security risks and translate regulatory requirements into practical operational and technical controls. Responsibilities:

• Manage end-to-end DSAR processing and ensure requests are completed accurately and within applicable timelines
• Conduct third-party privacy risk assessments, review vendor documentation, document findings, and track remediation
• Support privacy-by-design and privacy engineering initiatives, including data minimization, pseudonymization, anonymization, consent/preference management, retention, access controls, and monitoring
• Assist with enterprise data mapping, including data flows, systems, processing purposes, vendors, and controls
• Conduct Data Protection Impact Assessments (DPIAs) and related privacy risk assessments

Research U.S. and global privacy regulations and translate requirements into actionable controls

• Support development of privacy policies, procedures, standards, templates, and guidance
• Maintain program trackers, document decisions, monitor control implementation, prepare status updates, and escalate risks

• Bachelor’s degree or equivalent experience in MIS, CIS, Computer Science, Cybersecurity, Law, or a related discipline
• Preferred: CIPP/US, CIPP/E, CIPM, CIPT, or related privacy/security certification
• 3+ years of experience in data protection, privacy, compliance, risk management, or a related field
• Strong knowledge of U.S. and global privacy, data protection, and information security requirements
• Hands-on experience processing DSARs and coordinating privacy requests across multiple stakeholders
• Experience supporting privacy risk assessments, DPIAs, third-party risk, or privacy compliance activities
• Ability to translate privacy and regulatory requirements into business, vendor, and technical controls
• Strong organizational, documentation, research, and analytical skills with excellent attention to detail
• Strong written and verbal communication skills with the ability to communicate with business and technical stakeholders
• Ability to manage multiple priorities and sensitive/confidential information
• Preferred: Experience with GRC platforms, data posture management, consent/preference management, and privacy compliance tools
• Proficiency with Microsoft Office, including Excel, Word, PowerPoint, and OneDrive

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce’s sole discretion unless and until paid and may be modified in its discretion consistent with the law.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.