Privacy Analyst

Responsibilities Location: São Paulo Working Model: On-Site Mon-Thu, Remote: Friday We are a global chemical company looking for a detail-oriented Privacy Analyst to join our Legal team. You will be based in São Paulo and work closely with the Privacy Manager in the U.S. to support our global privacy and data protection program. You'll gain broad, hands-on experience with a range of privacy laws, including the EU and UK GDPR, US federal and state privacy laws, China's PIPL, Brazil's LGPD, and other national frameworks. The work covers employee, customer, supplier, and occupational health data in a complex, multinational industrial company.

Support the company’s global privacy and data protection program, working with colleagues across regions and business functions. Responsibilities include coordinating data subject and consumer rights requests; maintaining data inventories and processing records; assisting with privacy and transfer impact assessments for systems, vendors, AI tools, and projects; and supporting international data transfer requirements.

The role also helps review supplier privacy questionnaires and contract terms, coordinate privacy incident and data breach responses, maintain privacy policies and notices, develop training and awareness materials, and support program reporting, audits, and compliance reviews.

Up to one day per week, the analyst will provide paralegal support to the Latin America Regional Lawyer, including help with commercial contracts, legal matter tracking, corporate records, legal research, outside counsel coordination, and file management.

Qualifications Required: A degree in Law or a related technical, paralegal, or bachelor’s program, such as Information Management, Compliance, or Business Administration; experience in privacy and data protection; professional fluency in written and spoken Portuguese and English; strong organization and attention to detail; and sound judgment when handling confidential information.

Preferred: A privacy certification, such as IAPP CIPP/E, CIPP/US, CIPM, or CIPT, or willingness to earn one; familiarity with privacy laws such as Brazil’s LGPD, the GDPR, China’s PIPL, or U.S. state privacy laws; experience with OneTrust, Microsoft 365, or corporate and commercial paralegal work; and Spanish-language skills. Interest in AI governance and responsible data use is also valued.

The successful candidate will bring integrity, analytical thinking, clear cross-cultural communication, collaboration, initiative, and a willingness to learn in a changing global regulatory environment.