Privacy Consultant – Mid Level

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Manage privacy program workflows within OneTrust, including data subject requests, mapping, assessments, cookies, and incident management.

• Set up and maintain all necessary configurations on the platform, such as forms, automation rules, dashboards, and reports, independently of the technical team.

• Receive, prioritize, and address data subject requests by gathering information from various business areas, consolidating investigations, and preparing responses for validation by the Data Protection Officer (DPO).

• Conduct mapping interviews with business units and ensure that records of processing activities and data inventories are consistently updated.

• Assist the DPO with impact assessments and risk analyses, as well as contribute to the drafting and reviewing of privacy notices, policies, and communications.

• Oversee cookie governance, including periodic scans, classification of cookies, managing unknown cookies, and publishing the cookie banner.

• Activate the incident response protocol and monitor vendor risk assessments and the request portal.

• Document status updates and outstanding items via email, ensuring relevant parties are informed, and support training and awareness initiatives.

⛳️ Requirements

• Completed Bachelor's degree in Law.

• Practical experience in privacy and data protection, with direct involvement in at least two of the following areas: data subject requests, mapping and records of processing activities, cookies, privacy notices, or impact assessments.

• Hands-on experience with a privacy platform, demonstrating the ability to configure it independently (proficiency in OneTrust is the primary requirement for this position).

• Knowledge of the Brazilian Data Protection Law (LGPD), including legal bases, data subject rights, personal and sensitive data, data lifecycle, flows, and sharing.

• Availability for full-time work with exclusive dedication to a single client, without servicing other accounts simultaneously.

• Official OneTrust certification at the Professional or Expert level (considered an advantage).

• Certifications from EXIN or IAPP (CIPP/E, CIPM, or AIGP) (considered an advantage).

• Postgraduate degree or relevant courses in data protection (considered an advantage).

• Previous experience working directly with a client in environments involving multiple entities, locations, and applications (considered an advantage).

• Familiarity with AI governance, including the EU AI Act, Brazil's AI Legal Framework, and ISO/IEC 42001 (considered an advantage).

• Intermediate or advanced proficiency in English; knowledge of Spanish is a plus.

• Experience with children's and adolescents’ data handling (considered an advantage).

🏝️ Benefits

• Comprehensive health and dental insurance without co-payment.

• Access to Wellhub.

• Meal allowance provided.

• Equipment supplied by the partner.