SWAPNA NARA
Austin,TX
Summary
Privacy Compliance & Risk Analyst with experience supporting enterprise privacy compliance, IT risk management, regulatory compliance, data protection, and governance activities. Hands-on experience with privacy risk assessments, high-risk personal information processing, compliance monitoring, audit evidence management, remediation tracking, and data governance. Experienced in partnering with Legal, Engineering, Information Security, Product, Data, and business stakeholders to assess risks, strengthen controls, and support accountability across enterprise technology environments.
Overview
7
7
years of professional experience
Work History
Privacy Compliance & Risk Analyst
Deloitte
Dallas, TX
07.2025 - 08.2026
- Assessed high-risk personal information processing activities by reviewing data use and flows, identifying privacy risks, documenting findings, and supporting risk mitigation in line with applicable privacy laws and internal controls.
- Aligned regulatory and framework requirements with internal policies and controls, including GDPR, CCPA/CPR, ISO 27001, and ISO 27701, to ensure comprehensive compliance.
- Monitored privacy program controls and compliance activities, implementing remediation plans to enhance accountability and adherence to regulatory requirements and internal policies.
- Evaluated data platforms, pipelines, and large-scale data processing workflows to understand personal information handling, assess control coverage, and support data governance and privacy-by-design practices.
- Partnered with Legal, Engineering, Information Security, Product, Data, and business stakeholders to interpret privacy requirements and coordinate compliance activities, ensuring alignment and addressing control gaps.
IT Risk & Compliance Analyst
Wipro
Pune, India
09.2019 - 01.2023
- Performed IT risk assessments and control reviews to identify compliance gaps, evaluate potential risks, and support risk mitigation activities.
- Reviewed regulatory and policy requirements, mapping applicable controls to organizational standards and compliance obligations to ensure adherence.
- Prepared and maintained audit evidence, risk registers, control documentation, and compliance reports to support internal and external audit activities.
- Tracked remediation actions and coordinated with technology and business stakeholders to resolve identified control deficiencies.
- Supported data governance and information protection initiatives by reviewing technology processes, documenting controls, and monitoring compliance risks for sensitive and personal information.
Education
Master of Science - Information Science
University of North Texas
05-2025
Bachelor of Science - Computer Science and Engineering
Bharath Institute of Higher Education and Research
05-2019
Skills
- Privacy & Data Protection: Privacy Compliance, Data Protection, Personal Information Processing, Privacy Risk Assessments, Privacy Controls
- IT Risk & Compliance: IT Risk Assessment, Risk Identification, Control Reviews, Regulatory Compliance, Policy Compliance, Risk Mitigation
- Privacy Governance: Privacy Program Monitoring, Data Governance, Compliance Monitoring, Risk-Based Assessments, Control Effectiveness
- Audit & Remediation: Audit Evidence Management, Compliance Documentation, Remediation Tracking, Corrective Actions, Audit Readiness, Risk Reporting
- Data & Technical Governance: Data Platforms, Data Pipelines, Data Flows, Metadata Management, Data Lineage, Information Protection
- Laws & Frameworks: GDPR, CCPA/CPR, ISO 27001, ISO 27701, Regulatory Requirements, Privacy Policies and Control Mapping
- Stakeholder Collaboration: Legal, Engineering, Information Security, Product, Data Teams, Business Stakeholders, Cross-Functional Coordination
Timeline
Privacy Compliance & Risk Analyst
Deloitte
07.2025 - 08.2026
IT Risk & Compliance Analyst
Wipro
09.2019 - 01.2023
Bachelor of Science - Computer Science and Engineering
Bharath Institute of Higher Education and Research
Master of Science - Information Science
University of North Texas