Senior Data Privacy Consultant- Remote (Anywhere in the U.S.)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

We are looking for a motivated and engaging Senior Data Privacy Consultant to join our growing Privacy Team! This is a fully remote, individual contributor role with occasional travel to support client consulting engagements. The successful candidate is a hard-working, self-motivated, data privacy professional who can help companies evaluate and enhance their data protection processes according to applicable regulations and best practices. You will mentor and share learnings with colleagues to foster a learning culture.

Role and Responsibilities: 

• Deliver successful privacy consulting engagements across multiple Governance Services offerings while maintaining high customer satisfaction.
• Conduct compliance assessments against various US-based and international data privacy laws and regulations, including GDPR, CCPA/CPRA, HIPAA, GLBA, PIPEDA, PIPL, DPDPA and others.
• Develop regulatory updates to keep customers up to date on the current data security and privacy landscape.
• Research and identify applicable legal and administrative statutes/standards and other details related to customers’ Data Privacy Programs.
• Develop policies, processes, and other documentation) to comply with relevant privacy regulations and frameworks.
• Contribute to the growth, maturation, and socialization of the GuidePoint data privacy consulting practice.
• Perform both gap and maturity assessments against the NIST Privacy Framework.
• Provide privacy-based advisory and remediation services to GuidePoint customers to help build or strengthen their privacy programs.
• Establish strong relationships and trust with customers to understand customers’ business environments and requirements.
• Work with other GuidePoint Security practices as part of a cohesive cross-functional team.

Required Experience and Position Requirements:

• Minimum of 5 years of combined relevant privacy experience across private/public sector, consulting and/or relevant education.
• Minimum of 3 years of direct experience performing data privacy-related consulting services for clients of various verticals, including financial and insurance, retail, healthcare, service providers (SaaS, PaaS, etc.), manufacturing, critical infrastructure/energy, etc.
• Strong understanding and working knowledge of privacy frameworks, including NIST Privacy, ISO 27701, GAPP and other equivalent data privacy standards.
• Strong demonstrated experience in developing data privacy policies, standards, plans, procedures, and other documentation to support customer-adopted frameworks and industry standards.
• Strong understanding of all the functions within a data privacy program, the ability to assess the maturity of a data privacy program, perform gap assessments against data privacy frameworks and how to provide strategic recommendations and direction to senior leadership.
• Strong written and oral communication skills, which includes articulating thoughts and distilling complex problems into digestible information to be consumed by anyone from technical resources to the highest level of management; proven experience communicating clearly to technical levels up through C-Level and Board level.
• At least one active standard industry certification is required, lAPP Certifications including CIPP/US, CIPP/E, CIPT, or CIPM a plus.
• Strong written communication skills to aid in the creation of customer deliverables.
• Remain current on privacy laws, regulations, trends, and developments, and incorporate them into service delivery.
• Strong ability to work independently and multi-task on multiple projects simultaneously.
• Personal drive and passion for growing themselves and the GnR Privacy Practice.
• Ability to simplify complex issues and provide pragmatic advice and practical solutions that can be operationalized.
• Team mindset, with ability to build strong relationships, and work collaboratively within a growing team and cross-functionally with members at all levels of the organization.
• Learning and growth mindset to keep up with emerging trends.
• Experience preparing reports and other deliverables that contain strategy, project, or technical analysis and findings in connection with consulting engagements and communicating those results to the team and client.
• Experience in proje