GRC Data Protection Analyst (Unpaid Volunteer Position)

Location: Remote

Reports to: GRC Tech Head

Time commitment: minimum 20 hours weekly

About the Organization:

Menzies Philanthropic Foundation (Menzies Mission) is a non-profit dedicated to supporting orphans and vulnerable families through resources, education, and holistic development rooted in the Menzies 8 Keys of Needs: Housing, Health, Nutrition, Education, Family, Community, Faith, and Love. We believe that self-actualization is a powerful pathway to breaking cycles of poverty and trauma. Through mental and emotional support, healing-centered guidance, and community-rooted programs, we strengthen connection and belonging, empowering individuals to realize their potential and transform their future.

In partnership with our social-impact company, Me Is We, we are developing a regenerative financial ecosystem to support the long-term sustainability and expansion of our mission. At the heart of this ecosystem is My Source Network, a global holistic wellness community platform devoted to healing and mindful connection. Through practitioners, conscious events, and transformational resources, My Source Network supports individuals on their journeys toward balance, empowerment, and belonging while cultivating a worldwide community rooted in healing, authenticity, and collaboration.

We are an impact-driven organization rooted in integrity, accountability, collaboration, and service. Our work is guided by a commitment to collective healing and empowering the communities we serve, knowing that meaningful, lasting change is created together. If you feel called to bring your skills, presence, and purpose into our mission, we would be honored to welcome you into the Menzies Mission community.

Job Overview:

As we grow, the protection of our customers' and clients' data is paramount. We are looking for a skilled and proactive GRC Data Protection Analyst to help build and mature our data protection aspect. This role will ensure our products and business operations comply with global data privacy regulations and security best practices from launch onward.

Key Responsibilities:

• Monitor and enforce compliance with global data protection regulations, including GDPR, CCPA, and other relevant privacy laws, across the wellness tech platform.
• Conduct data protection impact assessments (DPIAs) for new features and technologies. Maintain the company's risk register, specifically identifying, assessing, and mitigating privacy-related risks.
• Develop and audit data processing and cross-border transfer agreements in accordance with current regulatory standards. Act as the primary liaison to ensure these privacy policies are clearly communicated and consistently applied across the organization.
• Working comprehensively on data privacy challenges and requirements specific to the events technology sector, including attendee data collection, sponsor data sharing, and platform security.
• Maintain an inventory of data processing activities and analyze user data movement through the company as well as third parties systems.

Skills and Qualifications:

• A bachelor's or master's degree in a related field such as Information Technology, Computer Science, Law, or Business Administration
• Several years of hands-on experience in data protection, risk management, and compliance is often expected for experienced roles.
• Precision in handling data, documenting findings, and tracking compliance requirements is critical.
• Proven ability to analyze complex issues, identify trends, and develop effective solutions.

Preferred Experience:

• 1 to 3 years of experience (or equivalent academic/project work) in data protection, privacy, or compliance
• Familiarity with GDPR, CCPA, and other global privacy regulations
• Exposure to DPIAs, data mapping, or risk registers
• Certifications such as CIPP, CIPM, or ISO 27001 are a plus
• Comfortable translating privacy requirements into clear documentation

Application Process:

To apply, review the job description and submit your resume, portfolio, and cover letter to hr@menziesmission.org. Please ensure that your contact information is accurate for any status updates regarding your application. If selected, you will be contacted to discuss your qualifications and how they align with the organization's mission.

For any questions, feel free to reach out to hr@menziesmission.org. We look forward to reviewing your application.

Equal Opportunity Employer:

Menzies Philanthropic Foundation is committed to diversity, inclusion, and equal opportunity. We welcome applicants from all backgrounds and do not discriminate based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other characteristic protected by law. Accommodation for the application process is available upon request.