Privacy Senior Associate

Job Description

Grant Thornton is seeking an exceptional Senior Associate to assist our global privacy program management and maturity. The Privacy Senior Associate will report directly to INDUS Associate Director (U.S. Operations) and will work closely with Grant Thornton internal services. The Privacy Senior Associate contributes to the successful operation, assessment, and continuous improvement of Grant Thornton s Privacy Program and compliance practices by assisting in daily Privacy Program management activities and supporting initiatives. Support the global Privacy Team (primarily in U.S., India) by conducting Data Privacy Impact Assessments (DPIAs) as needed. Assist in maintaining current, accurate Records of Processing Activities (ROPAs) using One Trust and other tools as directed. Assist in generating Privacy Program documentation. Assist in maintaining and enhancing documentation for ISO privacy certification and be member of ISO audit support team. Update and maintain One Trust templates and configurations. Assist in creating and maintaining compliance matrix based on NIST Privacy Framework. Maintain Privacy Program metrics. Support day-to-day management of Privacy Program across Grant Thornton entities. Respond to Data Subject Access Requests (DSAR) by coordinating across Grant Thornton entities as needed. Maintain and provide administrative support for managing Privacy Program risks. Maintain content for the Privacy Team s intranet site and support Privacy awareness initiatives. Participate in special projects and perform other duties as assigned. Qualifications: Minimum 5 years experience as a privacy professional which included conducting risk assessments, documenting privacy processes, and responding to data subject access requests. Knowledge of fair information practice and data ethics principles and global privacy laws. Excellent writing and editing skills are mandatory. Excellent power point and excel skills. Experience working with training developers and developing training courses. BS/BA (or equivalent). Certified Information Privacy Manager (CIPM); Certified Information Privacy Professional (CIPP) or Certified Information Privacy Technologist (CIPT) certifications are a plus. Ability to exercise good judgement and balance risks in ambiguous and complex situations. Limited travel as needed.