Senior Privacy Specialist – CIPP/E Specialist

Lead Privacy Advisory. Strengthen Compliance. Enable Trust.

Tsaaro is looking for a Senior Privacy Specialist – CIPP/E Specialist with strong expertise in data protection regulations and practical privacy compliance. The role will involve delivering privacy. Assessments, advising clients on regulatory requirements, and supporting the implementation of privacy governance programs.

Key Responsibilities

Conduct privacy assessments including DPIAs, PIAs, RoPA, data mapping, gap assessments, and privacy audits.
Provide advisory support on GDPR, CCPA/CPRA, DPDP Act, PDPL and other global privacy regulations.
Develop and implement privacy policies, procedures, governance frameworks, and compliance controls.
Support Privacy by Design/Default initiatives across client projects.
Assist with Data Subject Rights (DSR) processes and privacy incident management.
Conduct third-party privacy risk assessments and vendor due diligence.
Work with Legal, Compliance, Security, Product, and Engineering teams to implement privacy requirements.
Track regulatory developments and translate changes into practical compliance actions.
Support client discussions, documentation, presentations, and project delivery.

Requirements

3+ years of experience in data privacy, privacy consulting, data protection, or a related field.
CIPP/E certification is preferred/strongly preferred.
Strong knowledge of GDPR and European data protection requirements, along with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.
Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance.
Familiarity with OneTrust, Securiti.ai, BigID, or similar privacy technology platforms.
Understanding of ISO 27001, NIST, or other relevant GRC frameworks.
Strong client-facing, analytical, documentation, and stakeholder management skills.
Ability to independently manage multiple privacy projects and deliverables.

Benefits

3+ years of experience in data privacy, privacy consulting, data protection, or a related field.
CIPP/E certification is preferred/strongly preferred.
Strong knowledge of GDPR and European data protection requirements, along with working knowledge of DPDP Act, CCPA/CPRA, PDPL, etc.
Hands-on experience with DPIAs, RoPA, data mapping, privacy assessments, and privacy governance.
Familiarity with OneTrust, Securiti.ai, BigID, or similar privacy technology platforms.
Understanding of ISO 27001, NIST, or other relevant GRC frameworks.
Strong client-facing, analytical, documentation, and stakeholder management skills.
Ability to independently manage multiple privacy projects and deliverables.

Competências necessárias

GDPR knowledge and applicationCIPP/E certification (certified privacy professional)Conducting DPIAs/PIAs (Data Protection/Privacy Impact Assessments)Creating and maintaining RoPA (Record of Processing Activities)Data mapping and data inventoryDeveloping privacy governance, policies, procedures and compliance controlsPrivacy by Design / Privacy by Default implementationData Subject Rights (DSR) management and processesPrivacy incident response and breach managementThird‑party/vendor privacy risk assessments and vendor due diligenceOneTrust (privacy technology platform) familiaritySecuriti.ai (privacy technology platform) familiarityBigID (data discovery/privacy technology) familiarityUnderstanding of GRC frameworks (ISO 27001, NIST)Stakeholder management and client‑facing consulting (documentation, presentations, project delivery)

Vagas similares