OneTrust Subject Matter Expert (SME)

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

• Jobseeker Video Testimonials
  
• Employee Glassdoor Reviews
  

If you are a OneTrust Subject Matter Expert (SME) and looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Role: OneTrust Subject Matter Expert (SME)
Location: Hyderabad | Pune | Chennai | Bangalore | Kolkata.
Hybrid Mode: Position
Exp: 3-8 Yrs

Requirements

Key Responsibilities

•         Participate in client requirements, discovery, fit-gap, and solution design workshops for OneTrust implementations or enhancements.

•         Provide functional and industry guidance across applicable OneTrust modules, including TPRM, Privacy, TRC, vendor assessments, control and compliance management, risk workflows, evidence collection, remediation, and reporting.

•         Translate business, risk, regulatory, security, privacy, and compliance requirements into clear OneTrust design recommendations, process flows, questionnaire structures, control mappings, data requirements, and reporting needs.

•         Advise configuration and implementation teams during configuration sessions, review proposed designs, and validate that the solution supports the intended operating model and risk outcomes.

•         Serve as a trusted SME to client stakeholders across Technology Risk, Information Security, Privacy, Procurement, Legal, Compliance, business functions, and third-party management.

•         Bring practical industry perspective on TPRM, security assessments, privacy and data protection processes, regulatory expectations, control validation, issue management, and audit-ready documentation.

•         Support prioritization of requirements, design decisions, open issues, dependencies, assumptions, and risks; escalate material concerns through the appropriate governance channels.

•         Prepare or contribute to status reporting, steering committee materials, action logs, decision logs, RAID items, and executive-level communications.

•         Identify enhancement opportunities across workflows, questionnaires, risk scoring, assessment processes, evidence management, remediation tracking, dashboards, and operating procedures.

•         Review project deliverables for quality, consistency, traceability, and alignment with approved requirements and design principles.

•         Support knowledge transfer, user adoption, process documentation, training materials, and transition to business-as-usual operations.

Job Requirements

•         Proven project experience developing, designing, implementing, or enhancing OneTrust-based solutions in at least one relevant module, such as TPRM, Privacy, TRC, or related GRC capabilities.

•         Demonstrated ability to work in an advisory capacity with clients and delivery teams rather than serving solely as a system configurator or administrator.

•         Experience participating in requirements gathering, process mapping, fit-gap analysis, solution design, configuration review, testing support, deployment readiness, or post-implementation enhancement activities.

•         Strong understanding of GRC technology and the relationship between business processes, risk frameworks, controls, assessments, evidence, issues, remediation, and reporting.

•         Experience supporting TPRM or related risk processes, including third-party onboarding, inherent risk assessment, due diligence, security and privacy questionnaires, evidence review, ongoing monitoring, issue tracking, and remediation closure.

•         Ability to lead or actively contribute to configuration and design sessions, ask structured discovery questions, challenge requirements constructively, and articulate design trade-offs.

•         Ability to provide concise, accurate status reporting and communicate decisions, risks, dependencies, and recommendations to both technical and executive audiences.

•         Strong analytical, documentation, stakeholder management, facilitation, and problem-solving skills.

•         Ability to manage multiple workstreams, deadlines, client stakeholders, and competing priorities in a consulting or project delivery environment.

Required Qualifications

•         Bachelor’s degree in computer science, Information Technology, Cybersecurity, Information Systems, Business, or a related discipline; equivalent relevant experience may be considered.

•         Minimum of 5 years of experience in GRC technology, Technology Risk, Information Security, Privacy, Compliance, TPRM, or a closely related field.

•         Demonstrated OneTrust experience supporting client or enterprise projects, with depth in at least one of TPRM, Privacy, TRC, or a related OneTrust capability.

•         Experience working with cross-functional stakeholders, including risk, compliance, information security, privacy, procurement, technology, business teams, and external vendors.

•         Strong written and verbal communication skills, including experience producing project updates, requirements documentation, design decisions, risk summaries, and executive-ready materials.

•         Ability to work independently, operate in ambiguous environments, and provide structured recommendations grounded in business and risk objectives.

Good-to-Have Qualifications

•         OneTrust certification or formal OneTrust training, particularly in Vendor Risk Management, Privacy, TRC or related modules.

•         Experience with multiple OneTrust modules or integrated GRC platforms, such as ServiceNow GRC, RSA Archer etc.

•         Experience with industry frameworks and standards such as ISO 27001, SOC 1/SOC 2, PCI DSS, NIST, data privacy requirements, third-party risk regulations, or financial services risk requirements.

•         Experience advising on risk scoring models, control libraries, assessment questionnaires, workflow design, exception management, evidence collection, audit trails, dashboards, and management reporting.

•         Experience supporting global or geographically distributed stakeholders and projects across multiple regulatory environments.

•         Experience in process improvement, workflow automation, operating model design, or identifying opportunities to improve efficiency, SLA performance, auditability, and user experience.

•         ISO 27001 Lead Auditor, CISA, CRISC, CISSP, CIPM, or other relevant professional certification.

•         Consulting experience involving workshop facilitation, executive communication, quality reviews, and delivery governance.

Benefits

Visit us at http://alignity.io/careers. Alignity Solutions is an Equal Opportunity Employer, M/F/V/D.

CEO Message: Click Here.
Clients Testimonial: Click Here.