Privacy, Risk, AI Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Create engagement methodologies to improve client privacy services.

• Act as a thought leader in Privacy, Risk, and AI for various engagements.

• Develop assessment plans and evaluate technical documentation, plans, and evidence.

• Analyze procedures and conduct interviews with clients.

• Facilitate discussions on information security, privacy, and risk with both technical and non-technical audiences.

• Identify issues related to enterprise information security, privacy, and compliance, and devise technical solutions.

• Conduct information risk, security, and compliance assessments, including control testing.

• Provide guidance to clients on developing privacy programs and procedures, such as data inventories, DSARs, and ROPAs.

• Design and implement enterprise information security and privacy programs.

• Prepare and review reports on advisory or assessment findings and recommendations.

• Evaluate cyber-related policies, procedures, legislation, and implementation directives.

• Assess and rectify compliance with cybersecurity regulations and frameworks across various industries.

• Maintain industry-specific certifications and engage in ongoing professional development.

• Collaborate with Project Managers, Directors, and Delivery team members to oversee project timelines and deliverables.

⛳️ Requirements

• Minimum of 3+ years of professional experience in cybersecurity and privacy.

• Experience in consulting or security within industry sectors like finance, healthcare, energy, or technology.

• Proficient in testing regulations such as GDPR, CCPA, COPPA, EU AI Act, DSA, DMA, and UK OSA.

• Awareness of current trends, challenges, and solutions in information risk, security, privacy, and AI innovations.

• Familiarity with NIST, ISO, CIS, and other frameworks related to information governance, risk, and security.

• Understanding of conventional enterprise risk and security operational practices.

• Knowledge of tools, solutions, and utilities related to information security.

• Bachelor's degree in Business Administration, Computer Science, Information Systems, Engineering, or a related field, or an equivalent combination of education and experience.

• Strong analytical and problem-solving skills.

• Excellent oral, written, and presentation abilities.

• Capability to work independently and manage time effectively.

• CIPM, CIPP, CISM, CCSK, CISA, CGEIT, or CRISC certifications are advantageous.

• Experience in Cyber Incident Response is a plus.

• Certifications and experience with AWS, Azure, or Google Cloud Platform are additional assets.

• Experience in AI Risk and Governance is a plus.

🏝️ Benefits

• Flexible work model allowing for remote work or office-based options.

• Access to employee resource groups.

• Opportunities to participate in both in-person and virtual events.

• Paid parental leave policy.

• Flexible time off arrangements.

• Reimbursement for certification and training expenses.

• Membership for digital mental health and wellbeing support.

• Comprehensive insurance options available.

• Commitment to equal opportunity and reasonable accommodation.