Senior Associate, Privacy

About Schellman

Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services, specializing in security and privacy audits, assessments, and certifications. As one of the largest cybersecurity assessment firms in the United States, Schellman is an accredited multi-framework ISO Certification Body for security, privacy, business continuity, and quality. We are a globally licensed PCI Qualified Security Assessor and a top provider to clients in the federal DoD space as a leading FedRAMP 3PAO and the first assessment firm authorized as a CMMC C3PAO. Our culture, client approach, and dedication to values have earned us certifications as a Great Places to Work, a Best Firms to Work For by Accounting Today, and a Glassdoor Best Places to Work. Our first core value—People Come First—is reflected in our culture, benefits, and business practices.

About the Role

Are you passionate about privacy and protecting consumer personal information in e-commerce? Do you want to build a career breaking down complex privacy requirements to help companies and individuals understand their rights and obligations? Schellman is seeking professionals to join our team as the privacy industry continues to evolve with advancing technologies. Our clients rely on us to navigate the patchwork of global privacy compliance, with new legislation emerging frequently. This role offers exposure to diverse organizations, allowing you to expand your knowledge and skills while staying current with industry best practices and emerging requirements.

Our remote team is highly collaborative, leveraging varied backgrounds and experiences to help clients understand and comply with privacy legislation. Schellman promotes continuous learning through hands-on training, speaking opportunities, privacy webinars, certifications, and professional development to keep team members updated on data protection trends.

Responsibilities

• Comply with Schellman’s code of ethics, professional conduct, methodologies, policies, and procedures.
• Adhere to professional and regulatory standards relevant to assigned service line specialization(s).
• Promote Schellman’s company culture and exemplify its values.
• Establish high-quality relationships and rapport with client personnel.
• Manage client expectations to ensure they are exceeded.
• Complete assigned duties in a timely manner with a high attention to detail.
• Collaborate with project team members throughout the life cycle of each project.
• Adhere to project schedules and keep team members apprised of progress.
• Escalate issues internally in a proper and timely manner.
• Use discretion and decorum in all client communications.
• Book travel reservations in accordance with Schellman's travel and expense policies.
• Perform the essential functions of other service delivery positions when qualified.
• Attend project kick-off and closing meetings.
• Execute assigned testing procedures, perform detailed analysis, document results, and suggest improvements.
• Serve as a contact for clients' basic questions regarding an engagement.
• Contribute to Schellman's practice development efforts.
• Develop expert knowledge of professional and regulatory standards relevant to assigned service line specialization(s).

Requirements

• Bachelor's degree in accounting, finance, business management, law, technology, or other relevant subject area, or equivalent years of experience directly related to the duties and responsibilities specified.
• Concentration or focus in data privacy, cybersecurity, or AI governance (preferred).
• 4+ years of related professional services or large corporate experience in information security auditing, assessment, consulting, compliance, or privacy operations, with a preferred focus on privacy regulation (e.g., CCPA, GDPR).
• Professional membership in IAPP, ISACA, ISC2, or AICPA (preferred).
• Maintains CIPP or CIPM Certification (required); CIPT, AIGP, or PLS Certification (preferred).
• Juris Doctor (JD) (preferred).
• Familiarity with privacy compliance software such as OneTrust, DataGrail, and Securiti (preferred).

Skills

• Familiarity with Schellman’s services, methodology, and relevant professional standards.
• Requisite knowledge of applicable technology, privacy, and security domains.
• High level of attention to detail and quality of work product.
• Client service oriented with excellent time management and organizational skills.
• Strong verbal and written communication skills.
• Ability to work on-site or remotely as a valuable contributor to a collaborative team.
• Capable of simultaneously managing assigned tasks for multiple projects.
• Proficient using Microsoft Word, Excel, and PowerPoint.
• Full understanding and application of ethics, independence, and Schellman’s values.

Schedule

This is a remote role, though some travel is required annually for in-person training, team meet-ups, strategy meetings, and client needs.