GDPR Compliance Consultant

Job Summary

To support organizations in achieving compliance with the EU and UK General Data Protection Regulation, the contracted GDPR Compliance Consultant will conduct privacy assessments, develop compliance programs, and implement privacy governance processes while working remotely.

Key responsibilities

• Conduct GDPR and UK GDPR readiness assessments and gap analyses, developing compliance programs and remediation roadmaps
• Draft, review, and negotiate Data Processing Agreements (DPAs) while advising clients on international data transfer requirements
• Deliver client workshops and privacy awareness training, collaborating with cybersecurity consultants to align privacy and security controls

Required qualifications

• Bachelor's degree in Information Security, Privacy, Law, Business, Computer Science, Healthcare Administration, or a related field
• Five or more years of GDPR consulting or privacy compliance experience, including conducting readiness assessments and gap analyses
• Experience preparing and maintaining Records of Processing Activities (ROPA) and performing Data Protection Impact Assessments (DPIAs)
• Demonstrated experience drafting and reviewing Data Processing Agreements and developing privacy governance programs
• Professional privacy certification (CIPP/E, CIPM, CIPT, or equivalent) strongly preferred