Business Analyst-Data Privacy-OneTrust

Privacy and Business Analyst

ROSS Stores. Consent & Preference Management Program

Role Purpose

Privacy, consent, preference, DSAR, and business requirements. This Wipro role is responsible for delivering its assigned outcomes within the Ross governance, architecture, privacy, security, quality, and release framework.

Key Responsibilities

• Lead discovery workshops for consent, preference, privacy, DSAR, and communication use cases.
• Define consent taxonomy, purposes, channels, preferences, statuses, sources, and precedence.
• Document current and target processes across POS, web, Epsilon, Marketing Hub, Bread Financial, Snowflake, and DSAR.
• Translate privacy requirements into operational business rules with Ross privacy/legal stakeholders.
• Define consent evidence, timestamps, sources, policy versions, and audit requirements.
• Define DSAR intake, verification, discovery, fulfillment, deletion, correction, opt-out, exceptions, and audit.
• Create user stories, acceptance criteria, process flows, business rules, and traceability.
• Support UAT and business sign-off.

Required Qualifications & Experience

• 8+ years business analysis/privacy consulting.
• Consent/preference and DSAR experience.
• OneTrust/Ketch or similar CPMP experience preferred.

Preferred Experience

• Retail, consumer, loyalty, marketing, customer-data, privacy, or regulated enterprise experience.
• Experience in multi-vendor environments with client and third-party platform teams.
• Agile delivery and structured enterprise governance experience.

Key Deliverables / Outputs

• Role-specific deliverables are completed against agreed acceptance criteria and phase gates.
• Risks, dependencies, assumptions, and decisions are documented and escalated early.
• Implementation evidence and documentation are complete for testing, audit, release, and operational handover.
• Knowledge transfer is completed for Ross and Wipro operational teams.

Success Measures

• On-time delivery of assigned outcomes.
• Quality and compliance with approved Ross requirements.
• Early identification and resolution of blockers.
• Clear documentation, traceability, and audit evidence.
• Effective collaboration across Wipro, Ross, and third-party teams.

Key Stakeholder Interfaces

• Ross business, privacy, marketing, technology, data, security, and program stakeholders.
• Wipro Delivery Head, Engagement Lead, Program Manager, Solution Architects, and engineering teams.
• Epsilon and other approved third-party platform teams.
• OneTrust/Ketch support or product teams where applicable.

Governance & Working Model

• Participate in relevant daily stand-ups, sprint ceremonies, weekly delivery governance, and phase-gate reviews.
• Follow Ross and Wipro security, privacy, access, confidentiality, and delivery standards.
• Maintain role-specific documentation and evidence.
• Escalate blockers through the agreed Wipro-Ross governance path.

Working JD for proposal and staffing purposes. Final level, location, experience, and certification requirements should be aligned to the approved staffing