dunnhumby
Privacy Risk & Assurance Analyst
At a Glance
- Location
- Gurgaon
- Experience
- 2+ years
- Posted
- 2026-04-29T00:59:01-04:00
Key Requirements
Domain Knowledge
- Regulatory
Requirements
2+ years of experience in privacy, data protection, risk, compliance, information security, or data governance.
Practical exposure to structured reviews or checks of operational inputs, for example: Reviewing request forms, assessments, or registers for completeness and accuracy.
Validating evidence against stated requirements or controls.
Experience working with systems or tools that hold risk, privacy, or compliance data, with an understanding that:
Some exposure to issue or action tracking, such as logging findings, updating status, or following up with owners under guidance.
Responsibilities
Conduct assurance reviews of privacy and security requests (CRAs, VRAs, controller requests), validating routing, inputs, controls, and risk mitigation.
Identify control gaps and failing controls, support remediation, and maintain assurance evidence and documentation.
Support end‑to‑end request flows, data hygiene, and accurate ROPA and backend records within the Securiti platform, including legacy remediation.
Track and manage issues arising from assurance, RACM testing, incidents, DSPM findings, and horizon scanning through to closure.
Review DSPM outputs to validate sensitive data locations, classifications, and data flows, ensuring alignment with ROPA and Securiti records.
Support remediation of privacy‑relevant data exposure risks in collaboration with product, data, and information security teams.