Privacy Security Analyst

Bonterra exists to propel every doer of good to their peak impact. We measure that impact against our vision to increase the giving rate as a percentage of GDP from 2% to 3% by 2033. We know that this goal is lofty, but we are confident that the right technology and expertise will strengthen trust in the sector, allowing the social good industry to accelerate growth and reach peak impact. Bonterra's differentiated, end-to-end solutions collectively support a unique network of over 20,000 customers, including over 16,000 nonprofit organizations and over 50 percent of Fortune 100 companies. Learn more at bonterratech.com.

At Bonterra, we're driven by a mission to unlock the power of the social good community. We build trusted SaaS platforms that enable nonprofits, foundations, and public agencies to drive transformational impact-while upholding a deep commitment to privacy, security, and ethical innovation. Our platforms are built to respect the rights of every user, partner, and stakeholder. As a Privacy Security Analyst, you'll help embed data protection principles into every part of our operations and platform. You'll work cross-functionally with security, legal, product, and engineering teams to support privacy compliance, reduce risk, and ensure we meet regulatory expectations in a rapidly evolving global landscape.

Your Impact

You will play a vital role in operationalizing Bonterra's privacy and data protection programs. From helping shape internal processes to evaluating AI risks, you'll ensure we build and operate responsibly-enhancing trust and enabling safe innovation for the social good sector.

You'll report to the Manager of Risk & Privacy and partner closely with the Legal & Compliance and Information Security teams. This role sits at the intersection of law, tech, and product-supporting key business areas and collaborating with stakeholders to build privacy into our products, systems, and culture.

What You'll Do:

Privacy Compliance & Operations

• Support execution and continuous improvement of Bonterra's privacy program

• Assist in implementing privacy frameworks (e.g., GDPR, CCPA/CPRA, HIPAA)

• Maintain and manage data processing inventories and Records of Processing Activities (RoPA)

Privacy Impact & Risk Assessments

• Conduct Data Protection Impact Assessments (DPIAs) and Transfer Impact Assessments (TIAs)

• Partner with InfoSec to track and mitigate privacy risks across systems and vendors

• Support vendor privacy evaluations and manage Data Processing Agreements (DPAs)

Product & Engineering Collaboration

• Work closely with Product and Engineering teams to ensure privacy-by-design

• Review new features and tools for privacy implications

Incident Response & Breach Support

• Support the privacy aspects of incident response and breach investigation

• Document and help remediate privacy-related security incidents

Training & Awareness

• Help deliver privacy awareness and training across Bonterra

• Foster awareness and shared accountability for data protection through guidance and resources

Requirements

• Multiple years of relevant experience in privacy, data protection, or compliance roles, ideally in a SaaS or tech-driven environment

• Working knowledge of privacy frameworks (e.g., GDPR, CCPA/CPRA, HIPAA)

• Understanding of SaaS data flows, cloud environments, and vendor ecosystems

• Ability to clearly communicate privacy risks to diverse audiences

• Ability to collaborate cross-functionally and communicate privacy risks clearly and accessibly

Preferred Skills

• Experience working with or within InfoSec teams

• Privacy certifications (CIPP/US, CIPP/E, CIPM, etc.)

• Familiarity with privacy tools such as OneTrust, TrustArc, or GRC platforms

• Knowledge of AI/ML privacy risks and emerging regulatory guidance

Compensation

We will be accepting applications for this role until 5/30/2025

Our Culture: At Bonterra, we're innovating with a higher purpose: to increase giving to 3% of US GDP by 2033, creating $573 billion more in global impact every year. To achieve our vision, we cultivate an inclusive environment where diversity is embraced and every team member feels empowered to contribute. Innovation, curiosity, and a commitment to equity guide our work. We foster a culture of belonging, ensuring that every individual is valued, respected, and given the tools to succeed. Together, we are dedicated to making a positive impact in the world.

Our comprehensive and competitive benefits include:

• Generous Flexible Time Off (FTO) Policy

• Up to 15 paid company holidays including some commemorating social justice events and self-care

• Paid volunteer time

• Resources for savings and investments

• Paid parental leave

• Paid sick leave

• Health, vision, dental, and life insurance with additional access to health and wellness programs.

• Opportunities to learn, develop, network, and connect

Please note the benefits specified on this page are applicable to full-time employees based in the United States. For international employees, actual benefits may vary based on local standards and regulations and will be determined in accordance with regional considerations, including but not limited to applicable laws and industry norms.

We are committed to being an equal opportunity employer and evaluate qualified applicants without regard to race, color, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, diversity of thought and any other characteristic protected by applicable law.