GDPR Compliance Consultant

Posted 8hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

GDPR Compliance Consultant helping organizations navigate cybersecurity and regulatory requirements. Building EU and UK privacy programs, assessments, documentation, and governance processes for regulated industries.

Responsibilities:

  • Conduct GDPR and UK GDPR readiness assessments and gap analyses
  • Develop and implement GDPR compliance programs and remediation roadmaps
  • Prepare and maintain Records of Processing Activities (ROPA)
  • Perform Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs)
  • Draft, review, and negotiate Data Processing Agreements (DPAs)
  • Review privacy notices, consent mechanisms, cookie disclosures, and privacy documentation
  • Design and implement Data Subject Rights (DSAR) processes
  • Advise clients on international data transfer requirements, including EU Standard Contractual Clauses, UK IDTA/Addendum, and the EU-U.S. Data Privacy Framework
  • Assess third-party privacy risks and support vendor due diligence
  • Develop privacy policies, governance documentation, and operational procedures
  • Support organizations processing special category data, including healthcare and clinical research information
  • Provide guidance on Article 27 representative requirements and supervisory authority interactions
  • Deliver client workshops, executive presentations, and privacy awareness training
  • Collaborate with cybersecurity consultants to align privacy and security controls
  • Remain current on GDPR guidance, enforcement actions, and evolving privacy regulations
  • Deliver GDPR consulting engagements on time and within scope
  • Produce high-quality compliance documentation requiring minimal revisions
  • Guide clients toward GDPR compliance and recommend practical remediation strategies
  • Build trusted advisor relationships with executive stakeholders

Requirements:

  • Bachelor's degree in Information Security, Privacy, Law, Business, Computer Science, Healthcare Administration, or a related field, or equivalent professional experience
  • Five or more years of GDPR consulting or privacy compliance experience
  • Demonstrated experience implementing GDPR compliance programs
  • Experience conducting GDPR readiness assessments and gap analyses
  • Experience preparing and maintaining ROPA documentation
  • Experience performing DPIAs, LIAs, and TIAs
  • Experience drafting and reviewing Data Processing Agreements
  • Experience developing privacy governance programs
  • Experience advising executive leadership and client stakeholders
  • Strong working knowledge of EU GDPR and UK GDPR
  • Strong working knowledge of ROPA, DPIAs, LIAs, TIAs, DSAR, DPAs, international data transfers, SCCs, UK IDTA/Addendum, EU-U.S. Data Privacy Framework, vendor risk management, Privacy by Design, privacy governance frameworks, Article 27 representative requirements, consent management, privacy notices, data mapping, data retention, and special category data processing
  • Excellent written and verbal communication skills
  • Ability to work directly with executive-level clients
  • Professional privacy certification such as CIPP/E, CIPM, CIPT, or equivalent strongly preferred
  • Experience supporting multinational organizations preferred
  • Previous consulting experience strongly preferred
  • Industry experience in healthcare, life sciences, biotechnology, clinical research, pharmaceutical, medical device, SaaS, or technology highly desirable
  • Knowledge of ICH-GCP, clinical trial regulations, informed consent requirements, HIPAA, or special category health data processing preferred