Senior Associate, Cybersecurity & Data Privacy

Responsibilities

• Conduct comprehensive assessments of clients' current ad tech practices and identify compliance gaps related to privacy regulations.
• Implement changes in various Ad Tech technologies to operationalize compliance strategy.
• Develop and deploy methodologies on integrating data protection by design principles to the SDLC, including requirements, elicitation, design, implementation, testing, deployment, and ongoing administration and maintenance.
• Develop and deploy methodologies to advise clients on applying consent models to cookies, pixels, beacons, and other tracking technologies for websites and mobile applications.
• Create and deploy website scanning strategies and technologies; recommend and implement technical measures to support compliance with consent and preference management obligations.
• Support delivery of engagements related to Privacy Technology implementations, integrations, and configurations; privacy by design; Software / Solution Development Lifecycle (SDLC) integration; privacy source code analysis; website and application compliance; and Privacy Technology training and adoption.
• Design and develop robust API/system integrations utilizing cutting-edge privacy tools, acting as a key system architect.
• Monitor and troubleshoot integration issues, ensuring system reliability and performance.
• Create documentation identifying data flows between various systems and technologies.
• Support activities of engagements including interaction with other team members, subject matter experts, external counsel, and client contacts.
• Create project status summaries, reports, metrics, written analyses, assessments, and other presentations of work performed.
• Develop standardized metrics, methodologies, and other work products to be delivered by client project teams.
• Stay informed on industry trends and best practices in system architecture, automation and integration.

Requirements

• Bachelor’s Degree with a solid academic performance.
• 3+ years of relevant experience in a consulting or industry-specific experience.
• Knowledge and experience developing and managing key privacy deliverables such as: Data Inventory, DPIA, PIA, Third-party Risk, Incident Response, Data Subject Access Rights, Tracking Technologies, Consent, Privacy Policy, and VRMs.
• Experience working with tag management systems and other marketing tools including Google Tag Manager and Google Analytics.
• Deep knowledge of privacy regulations and frameworks (e.g., GDPR, CCPA, HIPAA) and their practical implementation.
• Proven track record of successfully leading and managing a team of privacy consultants or professionals.
• Excellent communication and interpersonal skills, with the ability to explain complex privacy concepts to non-technical stakeholders.
• Strong analytical and problem-solving abilities to identify privacy risks and develop practical solutions.
• Certified Information Privacy Professional (CIPP) and/or OneTrust certifications (preferred).
• Willingness and flexibility to travel as required.