GDPR Compliance Consultant

🔥 16 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RSI Security

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

RSI Security is a leading cybersecurity and compliance provider based in the United States. The company specializes in helping organizations navigate complex compliance standards such as PCI DSS, HIPAA, GDPR, and more. They offer a wide range of services including cybersecurity risk assessments, virtual CISO consulting, penetration testing, cloud security, and incident response. RSI Security caters to various industries, including government, healthcare, finance, and technology, ensuring robust security frameworks and compliance management. As a trusted partner, RSI Security is dedicated to minimizing risk and safeguarding data for companies and institutions worldwide.

📋 Description

• Conduct GDPR and UK GDPR readiness assessments and gap analyses • Develop and implement GDPR compliance programs and remediation roadmaps • Prepare and maintain Records of Processing Activities (ROPA) • Perform Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs) • Draft, review, and negotiate Data Processing Agreements (DPAs) • Review privacy notices, consent mechanisms, cookie disclosures, and privacy documentation • Design and implement Data Subject Rights (DSAR) processes • Advise clients on international data transfer requirements, including EU Standard Contractual Clauses, UK IDTA/Addendum, and the EU-U.S. Data Privacy Framework • Assess third-party privacy risks and support vendor due diligence • Develop privacy policies, governance documentation, and operational procedures • Support organizations processing special category data, including healthcare and clinical research information • Provide guidance on Article 27 representative requirements and supervisory authority interactions • Deliver client workshops, executive presentations, and privacy awareness training • Collaborate with cybersecurity consultants to align privacy and security controls • Remain current on GDPR guidance, enforcement actions, and evolving privacy regulations • Deliver GDPR consulting engagements on time and within scope • Produce high-quality compliance documentation requiring minimal revisions • Guide clients toward GDPR compliance and recommend practical remediation strategies • Build trusted advisor relationships with executive stakeholders

🎯 Requirements

• Bachelor's degree in Information Security, Privacy, Law, Business, Computer Science, Healthcare Administration, or a related field, or equivalent professional experience • Five or more years of GDPR consulting or privacy compliance experience • Demonstrated experience implementing GDPR compliance programs • Experience conducting GDPR readiness assessments and gap analyses • Experience preparing and maintaining ROPA documentation • Experience performing DPIAs, LIAs, and TIAs • Experience drafting and reviewing Data Processing Agreements • Experience developing privacy governance programs • Experience advising executive leadership and client stakeholders • Strong working knowledge of EU GDPR and UK GDPR • Strong working knowledge of ROPA, DPIAs, LIAs, TIAs, DSAR, DPAs, international data transfers, SCCs, UK IDTA/Addendum, EU-U.S. Data Privacy Framework, vendor risk management, Privacy by Design, privacy governance frameworks, Article 27 representative requirements, consent management, privacy notices, data mapping, data retention, and special category data processing • Excellent written and verbal communication skills • Ability to work directly with executive-level clients • Professional privacy certification such as CIPP/E, CIPM, CIPT, or equivalent strongly preferred • Experience supporting multinational organizations preferred • Previous consulting experience strongly preferred • Industry experience in healthcare, life sciences, biotechnology, clinical research, pharmaceutical, medical device, SaaS, or technology highly desirable • Knowledge of ICH-GCP, clinical trial regulations, informed consent requirements, HIPAA, or special category health data processing preferred