133 applicants

Company

GuidePoint Security · 8 hours ago

Principal Data Privacy Consultant- Remote (Anywhere in the U.S.)

United States

Full-time

Remote

Senior Level

5+ years exp

Maximize your interview chances

Cyber SecurityInformation Technology

Comp. & Benefits

Insider Connection @GuidePoint Security

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Conduct compliance assessments against various US-based and international data privacy laws and regulations, including GDPR, CCPA/CPRA, HIPAA, GLBA, PIPEDA, PIPL, DPDPA and others.

Develop regulatory updates to keep customers up to date on the current data security and privacy landscape.

Research and identify applicable legal and administrative statutes/standards and other details related to customers' Data Privacy Programs.

Develop policies, processes, and other documentation) to comply with relevant privacy regulations and frameworks.

Perform both gap and maturity assessments against the NIST Privacy Framework.

Provide privacy-based advisory, remediation, and strategic services to GuidePoint customers to help build or strengthen their privacy programs.

Develop tailor made privacy programs for customers to meet their compliance requirements, while also aligning with widely accepted best practice Privacy Program functions.

Contribute to the growth, maturation, and socialization of the GuidePoint data privacy consulting practice.

Establish strong relationships and trust with customers to understand customers' business environments and requirements.

Work with other GuidePoint Security practices as part of a cohesive cross-functional team.

Support presales discussions with customers and contribute to the creation of Statements of Work (SOWs).

Participate in webinars and other speaking opportunities to promote the Data Privacy practice.

Provide mentorship to fellow data privacy staff.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Data Privacy ConsultingNIST Privacy FrameworkGDPR ComplianceCIPP CertificationISO 27701Data Privacy PoliciesClient Relationship ManagementProject ManagementHIPAA ComplianceCCPA CompliancePIPEDA ComplianceData GovernanceArtificial Intelligence KnowledgeWebinar Speaking

Required

Minimum of 5 years of combined relevant privacy experience across private/public sector, consulting and/or relevant education.

Minimum of 3 years of direct experience performing data privacy-related consulting services for clients of various verticals, including financial and insurance, retail, healthcare, service providers (SaaS, PaaS, etc.), manufacturing, critical infrastructure/energy, etc.

Strong understanding and working knowledge of privacy frameworks, including NIST Privacy, ISO 27701, GAPP and other equivalent data privacy standards.

Strong demonstrated experience in developing data privacy policies, standards, plans, procedures, and other documentation to support customer-adopted frameworks and industry standards.

Strong understanding of all the functions within a data privacy program, the ability to assess the maturity of a data privacy program, perform gap assessments against data privacy frameworks and how to provide strategic recommendations and direction to senior leadership.

Strong written and oral communication skills, which includes articulating thoughts and distilling complex problems into digestible information to be consumed by anyone from technical resources to the highest level of management; proven experience communicating clearly to technical levels up through C-Level and Board level.

At least one active industry-recognized IAPP Certifications including CIPP/US, CIPP/E, CIPT, or CIPM.

Strong written communication skills to aid in the creation of customer deliverables.

Remain current on privacy laws, regulations, trends, and developments, and incorporate them into service delivery.

Strong ability to work independently and multi-task on multiple projects simultaneously.

Personal drive and passion for growing themselves and the Data Privacy Practice.

Ability to simplify complex issues and provide pragmatic advice and practical solutions that can be operationalized.

Team mindset, with ability to build strong relationships, and work collaboratively within a growing team and cross-functionally with members at all levels of the organization.

Learning and growth mindset to keep up with emerging trends.

Experience preparing reports and other deliverables that contain strategy, project, or technical analysis and findings in connection with consulting engagements and communicating those results to the team and client.

Experience in project management and the ability to clearly communicate data privacy issues verbally on both a formal and informal basis to all levels of client staff.

Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.

Team mindset, with ability to build strong relationships, and work collaboratively within a growing team and cross-functionally with members at all levels of the organization.

Preferred

Juris Doctorate degree from an accredited US school along with recent relevant Privacy Law experience.

Demonstrated experience with assessing, developing, and implementing data governance and protection programs, including conducting data discovery of data flows and inventories, and evaluating the security and privacy controls that protect an organization's sensitive data.

Publish content and/or perform conference speaking to demonstrate thought leadership.

Conference and webinar speaking experience.

Expert knowledge of US and EU privacy laws.

Experience implementing and/or developing programs leveraging OneTrust or other prominent privacy platforms.

Solid understanding of the role of Artificial Intelligence (AI) and automated decision-making technology as it relates to Personal Information (PI).