dunnhumby

Privacy Risk & Assurance Analyst

Apply Now

At a Glance

Location
Gurgaon
Experience
2+ years
Posted
2026-04-29T00:59:01-04:00

Key Requirements

Domain Knowledge

  • Regulatory

Requirements

2+ years of experience in privacy, data protection, risk, compliance, information security, or data governance.

Practical exposure to structured reviews or checks of operational inputs, for example: Reviewing request forms, assessments, or registers for completeness and accuracy.

Validating evidence against stated requirements or controls.

Experience working with systems or tools that hold risk, privacy, or compliance data, with an understanding that:

Some exposure to issue or action tracking, such as logging findings, updating status, or following up with owners under guidance.

Responsibilities

Conduct assurance reviews of privacy and security requests (CRAs, VRAs, controller requests), validating routing, inputs, controls, and risk mitigation.

Identify control gaps and failing controls, support remediation, and maintain assurance evidence and documentation.

Support end‑to‑end request flows, data hygiene, and accurate ROPA and backend records within the Securiti platform, including legacy remediation.

Track and manage issues arising from assurance, RACM testing, incidents, DSPM findings, and horizon scanning through to closure.

Review DSPM outputs to validate sensitive data locations, classifications, and data flows, ensuring alignment with ROPA and Securiti records.

Support remediation of privacy‑relevant data exposure risks in collaboration with product, data, and information security teams.