Senior Data Privacy & Governance Analyst

SUMMARY Responsible for supporting the development, implementation, and administration of Alliant's enterprise data privacy and governance strategies, regulatory compliance efforts, and operational privacy framework, including obligations related to GDPR, CCPA/CPRA, U.S. state privacy laws, and other applicable privacy and data protection requirements. This role will help enable the responsible use of data to support innovation, business growth, strategic objectives, and the organization's ability to operate effectively across jurisdictions. This role will also be responsible for managing privacy operations independently, advising stakeholders on privacy and data governance risks, supporting AI and regulatory governance, coordinating privacy impact assessments, assisting with privacy and security incidents, maintaining policies, procedures, playbooks, and program documentation, and serve as the privacy representative on cross-functional business and technology initiatives. ESSENTIAL DUTIES AND RESPONSIBILITIES Support the development, implementation, and administration of the enterprise data privacy and governance program, including privacy operations, regulatory compliance, risk assessments, data governance, policy management, and stakeholder advisory support. Perform compliance activities related to GDPR, CCPA/CPRA, U.S. state privacy laws, and other applicable privacy and data protection requirements, including operationalizing regulatory obligations into policies, procedures, assessments, documentation, training, and business guidance. Serve as the privacy representative for new and existing business, technology, data, vendor, and AI initiatives, providing practical guidance on privacy-by-design, data minimization, appropriate data use, retention, access, sharing, and risk mitigation. Conduct and support Privacy Impact Assessments, Data Protection Impact Assessments, and related privacy risk reviews Work with the organization's AI Center of Excellence and related AI governance forums, including AI intake reviews, AI risk assessments, privacy reviews, documentation, approval workflows, and inventory of AI tools, use cases, models, vendors, data inputs, and decision-impacting use cases. Maintain governance of cookie banners, consent management platforms, tracking technologies, pixels, analytics tools, website privacy notices, and digital data collection practices. Handle the review, maintenance, publication, and periodic updates of privacy notices, disclosures, and transparency materials, and monitor for inconsistencies between notices, data inventories, PIAs, vendor reviews, consent tools, and actual business practices. Handle the development, maintenance, and application of data classification standards, and provide guidance on data minimization, least privilege, purpose limitation, appropriate data use, secure handling, retention, and remediation of sensitive data exposure risks. Manage and support DSR and privacy rights requests, including intake, validation, routing, response tracking, exception handling, fulfillment coordination, reporting, escalation, and continuous process improvement. Work on privacy review of security incidents involving personal information or sensitive data, including assessment of data elements, affected populations, impacted systems, jurisdictions, contractual notice requirements, escalation needs, remediation activities, and lessons learned. Maintain incident documentation, timelines, decision logs, evidence, remediation tracking, lessons learned, and updates to privacy incident response playbooks. Respond to client, partner, vendor, and due diligence questionnaires related to privacy, data protection, AI, data governance, and security controls. Support governance of enterprise platforms and business systems suc