Data Privacy Consultant

About the Role :

Are you passionate about the future of data and committed to upholding individual privacy rights? We are seeking an enthusiastic and experienced Senior Data Privacy Consultant to join our dedicated team.

This is a brilliant opportunity for someone with 4 to 7 years of experience to take a lead role in designing, implementing, and maturing our global data privacy program.

You will be the go-to expert, ensuring our processes, technology, and people are fully compliant with a rapidly evolving regulatory landscape. Your expertise will be key to building and maintaining the trust of our customers and stakeholdersa truly impactful role

Key Responsibilities and Impact Areas :

You will leverage your extensive experience to drive our privacy initiatives forward, including :

1. Strategy and Compliance Leadership :

- Regulatory Mastery : Serve as the primary subject matter expert (SME) on global data privacy regulations, including GDPR, CCPA/CPRA, HIPAA, Brazil's LGPD, and other emerging state/international laws.

- Policy Development : Lead the development, review, and rigorous implementation of comprehensive data privacy policies, standards, and procedures across all business units.

- Gap Analysis & Audit : Design and conduct detailed privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) for new and existing projects, systems, and vendors, providing actionable recommendations to close compliance gaps.

2. Privacy by Design & Operational Excellence :

- Cross-Functional Collaboration : Partner closely with Product Development, Engineering, IT Security, and Legal teams to embed "Privacy by Design" principles into the earliest stages of all new technologies and business initiatives.

- Data Mapping & Inventory : Oversee and maintain the organization's Records of Processing Activities (RoPA) and detailed data inventory, including data flow mapping, classification, and retention schedules.

- Vendor Risk Management : Conduct privacy and security due diligence on third-party vendors and partners, and review complex data processing agreements and contracts to ensure contractual compliance with all privacy requirements.

3. Incident Response and Data Subject Rights :

- Data Subject Rights (DSR) Management : Streamline and manage the process for responding efficiently and accurately to Data Subject Access Requests (DSARs), deletion requests, and other individual rights inquiries.

- Breach Protocol : Develop, test, and maintain the Data Breach Incident Response Plan, and lead efforts to contain, investigate, and report on any suspected or actual data privacy incidents in coordination with Legal and Security teams.

4. Training and Awareness :

Culture of Privacy : Create and deliver engaging, tailored privacy training and awareness programs to all employees and contractors, fostering a proactive and strong privacy culture across the company.

Essential Qualifications :

- Experience : 4 to 7 years of progressively responsible professional experience in Data Privacy, Compliance, Information Security, or a related field.

- Education : Bachelor's degree in Law, Information Technology, Computer Science, or a related field.

- Certifications (A definite plus) : One or more active, industry-recognized certifications is highly desirable, such as : CIPP/E, CIPP/US, CIPP/A, CIPP/C (Certified Information Privacy Professional) CIPM (Certified Information Privacy Manager) CIPT (Certified Information Privacy Technologist)

Desired Skills & Attributes :

- Regulatory Acumen : Deep, practical working knowledge of major global privacy regulations (e.g., GDPR, CCPA/CPRA) and a demonstrated ability to interpret legal text and translate it into practical business requirements.

- Analytical Prowess : Excellent analytical and problem-solving skills with a meticulous attention to detail.

- Communication & Influence : Stellar written and verbal communication skills, with the ability to clearly articulate complex privacy concepts to both technical teams and executive leadership.

- Consultative Approach : Proven experience serving as an internal or external consultant, capable of advising diverse stakeholders and driving consensus on privacy solutions.