Consulting Data Privacy Director

The Data Privacy Consulting Director is a leadership role at FORVIS MAZARS working with the Sensitive Data Cyber Compliance leadership to define, refine and expand the firm's practice areas and services offerings. Additionally, the Data Privacy Consulting Director will lead client consulting engagements working with FORVIS MAZARS accounts to identify data privacy risks and develop solutions for our clients to help managing them and building a plan for ongoing compliance.

The candidate must have a broad range of professional consulting experience, an expert understanding of data privacy regulations (CCPA, GDPR, DORA, etc.), experience working with internal and external legal counsel teams to develop privacy controls, policies, procedures, and direct experience or knowledge of the constantly evolving privacy regulatory landscape.

How you will contribute:

• Educate client leadership teams on the privacy regulations that directly impact their business.
• Conduct assessment and gap analysis of clients' current state of data privacy management practices and privacy risks.
• Lead discovery process to identify data inventories, websites, existing policies and procedures related to data management, current software platforms, active vendor lists, partnerships, etc.
• Produce data flows that map data internally and externally
• Develop and implement data governance and privacy policies and procedures on the client's behalf
• Define RoPA and DPIA for entire ecosystem of personal
• Work with internal/external legal teams to support of data governance and privacy framework
• Evaluate clients' vendors and partners and identify any vendor risk
• Evaluate clients' various marketing programs and identify any potential risk or questionable practices
• Work with client team to create data breach response procedures
• Work with client team to develop control systems to prevent or deal with violations of privacy regulations and/or internal privacy policies and procedures
• Help client evaluate privacy management software options including managed services offerings

We are looking for people who have Forward Vision and:

• Strong drive for transformational change, advising clients how to adapt and shift to the changing privacy landscape.
• Leadership experience that helps shape the future of our consulting practice, defining best practices around business processes and technology partners and developing innovative, disruptive strategies that unlock value for our clients
• Expert level understanding of data privacy laws and their impact on businesses
• Experience working with C-level executives and leadership teams
• Experience working in coordination with internal and external legal teams
• Expert knowledge of reporting procedures, audit controls, and record-keeping
• Highly methodical and diligent with outstanding planning abilities
• Exceptional communication skills
• Minimum of 10 or more years in a consulting or business leadership role
• BS/BA in data science, law, finance, business administration, or related field
• with ten years of relevant experience
• Experience with Record of Processing Activities (RoPA) or Data Privacy Impact Assessments (DPIA)
• Familiar with domestic and global privacy laws, regulations, and standards especially data privacy law such as Indonesian PDP/European GDPR, Singapore PDPA, etc.
• IAPP related certifications are a must
• Familiar with Data Management and Privacy, e.g OneTrust, TrustArc, Collibra, Imprivata.