Risk Management Associate - Data Privacy

Publicis Sapient's Global Client Risk Office (GCRO) works across all disciplines and applicable geographies to identify, prevent and mitigate risks, providing visibility across the organization and empowering our people to use measured risk to make informed decisions that fuel sustainable growth in an ever-evolving business landscape.

The Risk Management Analyst - Data Privacy role is an entry-level support role that assists with the execution and day-to-day administration of the company's global data privacy program. Working under the direction of the Global Data Privacy Program Lead and in partnership with Publicis Groupe's Global Data Privacy Office (GDPO), this role helps coordinate and execute program activities, track deliverables, maintain documentation, support stakeholder follow-up, and contribute to the identification, mitigation, and reporting of data privacy risks across regions, markets, and business processes.

The most typical project role will consist of leading sub-tracks of work as part of a larger project and supporting senior GCRO leadership in the execution of day-to-day risk management and compliance related activities in various risk areas (such as business and operational, information security, artificial intelligence, legal and regulatory), with a particular emphasis on data privacy. It may also include working on cross-functional initiatives or projects within GCRO as required.

Your Impact:

• Support the implementation and management of the global data privacy program alongside the Global Data Privacy Program Lead, helping to ensure program activities are executed consistently across relevant regions, markets, and internal teams.
• Support the development and implementation of strategies designed to minimize the risk of non-compliance with applicable privacy regulations, including CCPA, PIPEDA, GDPR, and other relevant privacy laws.
• Partner with GDPO to operationalize legal/regulatory guidance across brand activities and processes.

• Support GCRO's approach to identifying and assessing privacy risks as early as the RFP, MSA signing, and start-work stages of the engagement lifecycle.
• Undertake reviews of business processes to confirm best practices are followed regarding the handling, use, storage, retention, and protection of personal data.
• Build working relationships with appropriate client-facing, internal, legal, security, and other business stakeholders.
• Provide first-level support to stakeholders regarding data privacy and protection policies, procedures, and program expectations; monitoring compliance and escalating complex matters as appropriate.
• Assist with special and cross-functional projects related to privacy, risk management, compliance, data governance, process improvement, and operational efficiency.

Program Execution and Reporting:

• Under the supervision of the Global Data Privacy Program Lead, support core data privacy program activities within the assigned region or market, including issuing Data Inventory questionnaires to relevant contacts, ensuring completion, and performing quality checks on responses received.
• Facilitate factual due diligence activities for data privacy impact assessments, including gathering information, coordinating inputs, documenting findings, and tracking follow-up actions.
• Conduct research on relevant topics, trends, regulations, industry practices, and internal priorities to enhance privacy knowledge and support informed decision-making.
• Perform content development activities to support business initiatives, communications, training, and knowledge-sharing efforts.
• Host, coordinate, and support training and awareness activities designed to strengthen privacy knowledge, accountability, and program adoption.
• Track and report on key metrics to monitor program status, progress, risks, blockers, and completion rates, including providing periodic updates on data privacy deliverables, open items, risks, and program progress for review by program leadership.
• Complete assigned tasks and responsibilities within designated timelines through effective use of internal status meetings, follow-up mechanisms, personal time management, and prioritization skills.

Stakeholder Support:

• Support client teams to ensure questions related to data privacy and/or data protection are answered in a timely, accurate, and business-oriented manner.

• Support ad-hoc business requests related to data privacy, including client questionnaires and audits.
• Act as a day-to-day contact for track-related communications, ensuring timely responses, follow-through, and escalation where needed.
• Help promote consistent understanding and application of data privacy obligations across delivery teams, internal functions, and business process owners.

Your Skills & Experience

• 1-3 years of work experience in risk management, privacy, legal, compliance, project management, audit, or a related field.

• Foundational understanding of data privacy, information security, risk management, regulatory compliance, or business process governance preferred.
• Exposure to privacy regulations such as GDPR, CCPA, PIPEDA, or similar privacy laws is preferred.
• Experience or demonstrated ability to support projects, track deliverables, coordinate stakeholders, prepare status updates, and manage follow-ups across multiple workstreams.
• Strong project management, follow-through, prioritization, and organizational skills.
• Strong attention to detail, analytical and critical thinking, and ability to identify when matters require escalation.
• Ability to translate complex information into practical, business-friendly guidance.
• Comfortable working in a fast-paced environment with multiple priorities, evolving requirements, and time-sensitive deliverables.
• Demonstrated ability to work independently in ambiguous or unstructured environments, using sound judgment to define priorities, gather relevant information, develop recommendations, and move work forward with limited direction.
• Curiosity, accountability, and willingness to learn. Being a self-starter and taking initiative.

• Collaborative mindset with strong interpersonal and communication skills.
• Demonstrated aptitude to quickly and effectively adapt to technologies and tools outside of current experience.

Education: Bachelor s Degree required

Pay Range:$65,000-$80,000

The range shown represents a grouping of relevant ranges currently in use at Publicis Sapient. Actual range for this position may differ, depending on location and specific skillset required for the work.

• An inclusive workplace that promotes diversity and collaboration.
• Access to ongoing learning and development opportunities.
• Competitive compensation and benefits package.
• Flexibility to support work-life balance.
• Comprehensive health benefits for you and your family.
• Generous paid leave and holidays.
• Wellness program and employee assistance.

As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at hiring@publicis.sapient.com. Your information will be kept confidential according to EEO guidelines.