Data Privacy Architect

Data Privacy Architect

Washington, DC

The OneTrust professional is responsible for establishing and operationalizing data privacy standards across diverse technical environments, ensuring compliance with global and regional frameworks such as GDPR and CCPA/CPRA.

Core responsibilities include:

• Lifecycle Assessment: Collaborating directly with application engineering teams to audit data touchpoints, identifying what personal identifiable information (PII) is collected, where it is stored, how it moves, and what controls are required.
• Assessment Framework Optimization: Updating and streamlining privacy assessment questionnaires into concise, universal formats that application teams can easily complete.
• Remediation & Governance: Drafting formal privacy recommendations and corrective action plans, coordinating approval through the Data Protection Officer (DPO) function, and driving remediation workflows.
• Inventory & Risk Management: Maintaining centralized records of processing activities and configuring automated risk indicators to flag non-compliant or high-risk systems.

Technical & Platform Requirements

Candidates must have direct, hands-on configuration experience with the OneTrust privacy management platform. Theoretical or high-level familiarity alone is not sufficient.

Mandatory Platform Competencies:

• OneTrust Data Discovery: Deep expertise configuring automated scanning tools across both structured and unstructured data environments to discover, classify, and inventory personal data.
• OneTrust Data Mapping: Proven experience establishing data inventories, mapping processing activities, and documenting lineage and system touchpoints.
• OneTrust API Integration: Demonstrated ability to build, configure, and maintain platform APIs to automate data ingestion, synchronize third-party systems, and streamline compliance reporting.
• Reporting & Dashboards: Capability to configure custom reports, risk matrices, and status dashboards for compliance oversight and audit readiness.

Preferred / Secondary Competency:

OneTrust AI Governance: Experience or working knowledge of the platform's AI governance module to evaluate, monitor, and manage privacy risks within machine learning models and automated systems.

Must have Certifications & Practical Expertise:

• Required Certification/Knowledge: IAPP CIPT (Certified Information Privacy Technologist). Candidates must possess the certification or demonstrate complete mastery of the CIPT curriculum.
• Privacy by Design: Strong understanding of end-to-end Privacy by Design principles, including practical execution of Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), and Records of Processing Activities (ROPA).
• Hands-On Execution: Verified background in building, managing, and maintaining privacy architecture from scratch rather than performing isolated, administrative data entry.