1. Adhere to the highest degree of professional standards and strict client confidentiality.
2. Deep understanding of global privacy and data protection regulations, such as EU’s GDPR, CCPA, HIPAA, and GLBA.
3. Lead the execution of assigned client engagements from start to finish, which includes the engagement planning, directing, and completion of data inventory, compliance readiness assessments (GDPR, CCPA), and privacy program implementations, while managing those engagements to budget.
4. Apply current knowledge of privacy and data protection trends to issues and other opportunities for improvement.
5. Assist clients in planning and executing remediation plans identified in assessment activities.
6. Work with the client to plan an engagement strategy, define objectives, and address privacy-related controls risks and issues.
7. Proactively interact with key client management to gather information, resolve problems, and recommend improvements.
8. Ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
9. Work closely with Grant Thornton senior managers and partners to promptly identify and resolve client problems or issues.
10. Collaborate with team members at all levels in developing and marketing the privacy service offering.
11. Support business development activities, including client prospecting, proposal development, and professional networking.
12. Support development of thought leadership, external webcasts and other brand building activities.
13. Additional duties as assigned.
1. Bachelor's degree in Law, Cybersecurity, Information Technology, Computer Science and/ or MBA/PGDM from reputed school is required.
2. 7+ years of related work experience in a similar consulting practice or function, servicing cross-industry clients at a national level.
3. Certification(s) Preferred: Obtained or demonstrates an active pursuit of one or more of the following certifications: Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT), Information Systems Security Professional (CISSP), or other related certifications.
4. Experience working with the GDPR, CCPA, HIPAA, GLBA, and other relevant privacy regulations in order to perform data inventory, compliance program assessments, and privacy program implementations.
5. Experience conducting privacy and security risk and/or gap assessments and internal privacy audits, reviewing privacy practices, and preparing reports and other deliverables that contain strategy, project, or technical analysis and findings in connection with consulting engagements and communicating those results to the team and client.
6. Knowledge of privacy management solutions such as OneTrust, Securiti, BigID is a plus.
7. Experience in project management and the ability to clearly communicate data protection and privacy issues verbally on both a formal and informal basis to all levels of client staff.
8. Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships. Ability to work additional hours as needed.
