Job Summary:
Seasoned Data Privacy Senior Practitioner with deep expertise in privacy regulations and privacy program management, combined with strong hands-on experience implementing and configuring OneTrust.
The successful candidate will act as a trusted advisor to clients, helping them establish, mature, and operationalize privacy programs while leveraging OneTrust as an enabling platform.
The individual will lead discussions with Privacy, Compliance, Security, and business stakeholders, facilitating PIAs/DPIAs, translating regulatory requirements into practical processes, and driving privacy-by-design across the organization.
Experience: 8 - 12+ years
Mandatory Skills:
Strong hands-on OneTrust implementation and configuration experience, particularly Data Mapping and DPIA/PIA modules.
Deep privacy domain expertise across GDPR, CPRA/CCPA, and enterprise privacy programs.
Proven experience designing and operationalizing privacy processes and controls.
Ability to independently lead client workshops, requirement gathering, solution design, and implementation.
Strong experience facilitating and reviewing PIAs/DPIAs and privacy risk assessments.
Excellent executive-level communication, presentation, and stakeholder management skills.
Ability to explain privacy concepts clearly to business, legal, compliance, and operational teams.
Strong consulting mindset with experience advising clients on privacy program maturity and transformation.
REQUIRED QUALIFICATIONS:
IAPP Certifications (CIPP/US, CIPP/E, CIPM, CIPT) - MUST
OneTrust Professional or Expert Certifications.
Experience in consulting or professional services environments.
Key Responsibilities
Gather requirements, configure, and deploy OneTrust solutions, with primary focus on:
o Data Mapping o PIA/DPIA Automation
o Privacy Risk Management o Reporting & Dashboards
Design and implement privacy processes aligned with GDPR, CCPA/CPRA, and other global privacy regulations.
Lead and facilitate Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
Advise client on privacy governance, operating models, and privacy program maturity.
Develop privacy roadmaps, remediation recommendations, policies, standards, and operational procedures.
Act as a trusted advisor, providing thought leadership on privacy strategy and best practices.
