Privacy and Information Governance Analyst

Privacy and Information Governance Analyst

The Privacy & Information Governance Team at Chainalysis is responsible for ensuring the organization manages data in a lawful, defensible, and operationally sound manner across its full lifecycle. This includes privacy compliance, data governance, retention and deletion, and the operational response to legal requests such as subpoenas, court orders, and legal holds.

The team serves as the bridge between Legal, Security, and the business, translating legal and regulatory requirements into repeatable, auditable operational processes.

The Privacy and Information Governance Analyst is responsible for implementing and managing the day-to-day privacy program, data governance operations, and compliance processes. This role ensures that policies set by leadership are translated into practical controls, processes, and training that work across the organization.

In This Role, You’ll

• Operationalize privacy and governance policies through procedures, playbooks, and workflows.
• Manage data subject rights requests (access, deletion, correction, opt-out).
• Partner with IT and Security to enforce retention schedules, deletion processes, and records management.
• Run Privacy Risk Management including Privacy Impact Assessments (PIA) and maintaining the Records of Processing Activities (RoPA).
• Run DPIAs, LIAs, and other risk assessments; maintain risk registers.
• Coordinate incident response with Security and Legal.
• Monitor compliance metrics and prepare reports for leadership.
• Deliver privacy and information governance training to employees.
• Serve as first-line contact for business teams on privacy and data handling questions.

We’re Looking For Candidates Who Have

• 3–4 years of experience in privacy operations, compliance, or information governance.
• Strong knowledge of data subject rights and operational privacy requirements.
• Experience with records management, retention schedules, and data lifecycle processes.
• Ability to coordinate across IT, Legal, Security, and business functions.
• Excellent organizational and project management skills.

You Might Also Have

• IAPP CIPM, CIPP, or IG professional certifications (e.g. IGP)
• Familiarity with or an interest in the cryptocurrency and blockchain industry

Key skills/competency

• Privacy compliance
• Data governance
• Information governance
• eDiscovery
• Data subject rights
• Records management
• Risk management
• Incident response
• Policy development
• Compliance reporting