Data Privacy Consultant – Enterprise Governance

About the role

We are looking for a Data Privacy Consultant to lead the design and implementation of our enterprise-wide privacy governance framework. The role will support the organization in meeting regulatory obligations, embedding privacy by design, and driving continuous improvement across data protection processes.

Key responsibilities

• Design, implement and maintain a comprehensive Privacy Governance Framework.
• Develop and update privacy policies, standards, procedures and guidelines.
• Conduct Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs) and privacy risk assessments.
• Maintain Records of Processing Activities (RoPA) and review lawful bases, data retention, disposal and cross-border transfers.
• Support Privacy by Design/Default initiatives, data discovery, personal data mapping and third-party privacy compliance.
• Assist data subject-rights requests, privacy audits and regulatory compliance activities.
• Create and deliver privacy awareness and training programs.
• Recommend and evaluate privacy automation and GRC solutions.
• Support implementation and ongoing compliance with ISO 27701 and ISO 27001.
• Prepare privacy compliance reports, dashboards and monitor remediation actions.

Required profile

• Proven experience in privacy governance, data protection or compliance roles.
• Strong knowledge of GDPR, ISO 27701, ISO 27001 and related privacy standards.
• Ability to conduct DPIAs, PIAs and privacy risk assessments.
• Experience with data mapping, RoPA maintenance and cross-border data transfer assessments.
• Excellent communication skills for training and stakeholder engagement.

Required skills

• Privacy impact assessment methodologies.
• ISO 27701 and ISO 27001 compliance frameworks.
• Data mapping and Records of Processing Activities management.
• Privacy by Design/Default implementation.