Sr consultant Privacy & data protection
Publiée le 09/09/2024
Forvis Mazars
Temps de travail
Type de contrat
Langues parlées
Expérience professionnelle
Senior consultant – Privacy and data protection
About this position
As a Privacy and Data Protection Senior Consultant, you will assume a pivotal role in offering expert guidance and strategic counsel to our diverse clientele, primarily within the Financial Sector (e.g., banks, insurance entities, investment fund managers).
Leveraging your expertise in global privacy regulations, industry best practices, and emerging trends, you will closely collaborate with clients to assess their current privacy posture, identify gaps, and develop robust frameworks for compliance and risk mitigation.
Key responsibilities:
- Conducting privacy and data protection assessments and/or internal audits to evaluate clients’ compliance maturity and identify areas for improvement.
- Providing support to Data Protection Officers in fulfilling their day-to-day duties.
- Developing and implementing privacy programs, policies, and procedures aligned with industry standards and regulatory requirements.
- Establishing information notices for pertinent data subjects (e.g., website users, employees, clients, candidates, visitors).
- Offering expert advice on data governance, privacy by design, data mapping, and technical and security measures.
- Perform data protection, legitimate interest and transfer impact assessments.
- Maintaining records of processing activities.
- Managing privacy-related third-party relationships, encompassing due diligence performance, negotiation of data processing and joint controller agreements, and establishment of safeguards for personal data transfer.
- Collaborating with cross-functional teams to integrate privacy considerations into business processes, technology solutions, and product development lifecycles.
- Designing and delivering engaging privacy awareness training sessions and workshops.
- Serving as a trusted advisor to clients, providing strategic guidance on data subjects’ rights management, incident response, breach management, and regulatory inquiries.
- Staying abreast of emerging privacy and cybersecurity threats, regulatory updates, and industry developments to design proactive risk mitigation strategies.
Qualifications:
- A bachelor’s degree in law or fields related to privacy, data protection, and/or cybersecurity.
- A minimum of 2 years of experience in privacy and data protection with a law firm or advisory firm. In-house experiences is an asset.
- A strong understanding of GDPR, coupled with sound knowledge of global privacy, data protection and cybersecurity regulations.
- Professional privacy certifications are highly desirable.
- Exceptional analytical, problem-solving, and communication skills, with the ability to translate complex regulatory requirements into practical recommendations for diverse stakeholders.
- Demonstrated ability to lead and manage multiple projects simultaneously, prioritize tasks effectively, and thrive in a fast-paced, dynamic environment.
- Strong interpersonal skills with a client-centric mindset and a passion for driving positive change through collaboration and innovation.
- Fluency in spoken and written English; knowledge of French may be advantageous.
