Privacy and Data Protection Analyst
Hungry, Humble, Honest, with Heart.
Privacy & Data Protection Analyst
Location: Serbia
About the Privacy Team
The Nutanix Privacy Team is part of the Legal Department and is responsible for developing, implementing, and managing the company’s global privacy program. We are a fast-paced, collaborative, and strategically-focused team dedicated to upholding high standards of data protection and compliance across the organization.
Role Description
The Privacy Analyst will be a critical member of the Privacy Team, focusing on the day-to-day execution and management of operational privacy tasks. This role requires a highly organized, detail-oriented professional with excellent communication skills and a foundational understanding of global privacy, AI, and data protection regulations (e.g., GDPR, CCPA). The ideal candidate will ensure the efficient and compliant handling of core privacy and data governance processes.
This role operates in a hybrid work setup, requiring you to be in the office 3 days per week to facilitate teamwork and collaboration. 2 - 3 days per week you will work shifted hours to sync with our US stakeholders and U.S. based Privacy Legal team members. We provide the autonomy to design your morning schedule on these days, ensuring you have the flexibility to balance your professional impact with your personal life.
Key Responsibilities
Privacy Operational and Program Support
- Provide comprehensive operational assistance and support to the Privacy Legal team, including compliance tracking, evidence gathering, privacy by design, privacy impact assessments (PIAs/DPIAs), and risk assessments for new systems, vendors, initiatives, and products.
- Assist in maintaining the Record of Processing Activities (RoPA), data and AI inventories, and other regulatory compliance documentation.
- Participate in privacy-related strategic initiatives including enhancements to privacy governance, vendor risk management, and emerging technology controls.
- Create, update, maintain privacy program metrics.
- Support publication and dissemination of new and updated privacy policies.
- Perform other duties in general support of the global enterprise privacy and AI programs.
Data Subject Request (DSR) Management
- Manage the end-to-end lifecycle of Data Subject Requests (DSRs/DSARs) received from customers, employees, and other data subjects.
- Coordinate internal processes and collaborate with relevant business units (e.g., HR, IT, Security) to identify, retrieve, and redact data within defined regulatory timelines.
- Document all DSR activities and ensure complete audit trails.
Business Support and Inquiries
- Serve as a primary point of contact for internal business units (e.g., Marketing, Sales, Engineering) regarding day-to-day privacy inquiries and operational guidance.
- Triage and respond to privacy-related tickets and requests submitted through the Privacy email inbox, ServiceNow or similar systems, ensuring timely resolution and escalation as necessary.
Enablement and Training
- Assist in the development and deployment of privacy training materials, documentation, and awareness campaigns for employees and contractors.
- Maintain and update internal privacy documentation, playbooks, and standard operating procedures (SOPs).
System and Tool Management
- Manage and administer privacy-related systems and tools, including ticketing systems (e.g., ServiceNow), including the administration of the platform as a whole as well as specific functionality relating to (i) data mapping, (ii) privacy rights, (iii) assessments, and (iv) cookie consent management, and DSR portals.
- Monitor system performance, troubleshoot issues, and propose improvements for automation and efficiency.
Regulatory, Audit & Inquiry Support
- Help operationalize privacy, AI, and data protection obligations under relevant privacy and data protection laws such as CCP, GDPR, EU AI Act, and related regulatory guidance.
- Support responses to regulatory authorities, internal and external auditors, and compliance reviews involving privacy, AI, and data protection controls.
Qualifications
Required Skills and Experience
- Bachelor's degree or equivalent practical experience.
- 2+ years of experience working in a privacy, compliance, legal operations, or similar operational role.
- Demonstrated understanding of global privacy frameworks such as GDPR, CCPA/CPRA, EU AI Act, and other relevant data protection laws, with a willingness to learn and adapt to a rapidly evolving regulatory environment .
- Excellent organizational skills with a strong attention to detail and ability to manage multiple complex tasks simultaneously under tight deadlines.
- Experience working with a large global company.
- Strong written and verbal communication skills, with the ability to convey complex privacy concepts clearly to non-technical audiences across the organization.
- Strong analytical, problem-solving, and decision-making skills, with the ability to manage multiple priorities and workstreams simultaneously.
- Demonstrated ability to build and maintain effective working relationships with internal and external stakeholders.
- Ability to work independently as well as collaboratively within cross-functional teams.
- Prior experience administering or using specific privacy management software (e.g., OneTrust)
- Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint).
Preferred Qualifications
- Relevant professional certification (e.g., CIPP/US, CIPP/E, CIPM, CIPT).
- Experience in a technology or cloud software company environment.
- Experience managing case/ticket workflows, preferably within ServiceNow, Jira, or similar enterprise ticketing systems.
- Familiarity with enterprise frameworks such as ISO 27001, NIST, and SOC II.
- Familiarity with cross-functional collaboration in a global organization.
Work Arrangement
This role operates in a hybrid capacity, blending the benefits of remote work with the advantages of in-person collaboration. In locations where our workplace policy applies (i.e. San Jose, Durham, Mexico City, Bangalore, Pune, Hoofddorp, Belgrade, Barcelona, Singapore, Sydney and Tokyo), employees are expected to work onsite a minimum of 3 days per week to foster collaboration, team alignment, and access to in-office resources. Workplace type may vary based on location and team requirements. Please speak with your recruiter for details. Additional team-specific guidance and norms will be provided by your manager.
--
Nutanix is an equal opportunity employer.
Nutanix is an Equal Employment Opportunity and (in the U.S.) an Affirmative Action employer. Qualified applicants are considered for employment opportunities without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, protected veteran status, disability status or any other category protected by applicable law. We hire and promote individuals solely on the basis of qualifications for the job to be filled. We strive to foster an inclusive working environment that enables all our Nutants to be themselves and to do great work in a safe and welcoming environment, free of unlawful discrimination, intimidation or harassment. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations. If you need a reasonable accommodation, please let us know by contacting [email protected].