Practice Lead- Data Governance & Privacy- Remote (Anywhere in the U.S.)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

GuidePoint is looking for a motivated and engaged Data Governance & Privacy Practice Lead to join our growing Team! This is a fully remote, player coach role with periodic travel to promote the practice and support client consulting engagements. The successful candidate is a hard-working, self-motivated professional who can help companies evaluate and enhance their data governance and privacy practices according to applicable legal requirements and industry best practices. The consultant will mentor and share learnings with colleagues to foster a learning culture.

Role and Responsibilities: 

The selected candidate will be responsible for performing the following activities:

• Leading a team of consultants, providing mentorship, guidance, and career development.
• Continuing to grow and lead the Data Governance & Privacy team, ensuring that projects are delivered on time and on budget, and enabling the sales organization to grow the business.
• Developing new approaches and opportunities for expanding the GuidePoint customer base and meeting the needs of our customers.
• Evangelizing data governance and privacy services to Account Executives, Clients, and across the industry.
• Creating and implementing operational processes and templates to be used by consultants to drive consistency and support achievement of the business strategy.
• Leading pre-sales discussions with customers, creating Statements of Work (SOWs) and presenting them to current and prospective customers.
• Conducting and overseeing compliance assessments against various US-based and international data privacy laws and regulations, including GDPR, CCPA/CPRA, HIPAA, GLBA, PIPEDA, PIPL, DPDPA, and others.
• Conducting and/or overseeing maturity assessments of customers’ data protection landscape and data security governance policies, processes, and controls based on the C3 Working Group Data Security Maturity Model (DSMM) framework.
• Overseeing and/or developing data governance and privacy strategies for customers to address their unique business needs, incorporating policies and processes that leverage cutting-edge technologies to deliver strong data protection controls and practices across the data lifecycle.
• Developing regulatory updates to keep customers up to date on the current data security and privacy landscape.
• Contributing to the development of AI governance service offerings and overseeing the sales and delivery of the services.
• Researching and identifying applicable legal and administrative statutes/standards and other details related to customers’ data privacy programs.
• Developing policies, processes, and other documentation to comply with relevant privacy regulations and frameworks.
• Contributing to the growth, maturation, and socialization of the GuidePoint data governance and privacy consulting practice.
• Participating in webinars and other speaking opportunities to promote the Data Governance & Privacy practice.
• Establishing strong relationships and trust with customers to understand their business environments and requirements.
• Working with other GuidePoint Security practices as part of a cohesive cross-functional team.

Required Experience and Position Requirements:

• Minimum of 7 years of combined relevant data governance and privacy experience across private/public sector, consulting, and/or relevant education.
• Minimum of 5 years of direct experience performing data governance and privacy-related consulting services for clients of various verticals, including financial and insurance, retail, healthcare, service providers (SaaS, PaaS, etc.), manufacturing, critical infrastructure/energy, etc.
• Minimum of 3 years of experience in a leadership role for a consulting firm, while responsible for data governance or privacy.
• At least one active industry-recognized IAPP certification, including CIPP/US, CIPP/E, CIPT, or CIPM.
• Expert knowledge of US and EU privacy laws.
• Strong understanding and working knowledge of privacy frameworks, including NIST Privacy, ISO 27701, GAPP, and other equivalent data privacy standards.
• Strong demonstrated experience in developing data governance and privacy policies, standards, plans, procedures, and other documentation to support customer-adopted frameworks and industry stan