Consultant, Data Privacy and IT Security

Job description

As an Associate Consultant / Consultant at Grant Thornton, you will help clients navigate complex privacy regulations, data protection laws and IT governance frameworks. The role needs technical skills in data privacy, security, data governance and data classification.

You will participate in and support client engagements related to data privacy, governance and security, making sure projects are delivered on time, within scope and within budget.

Responsibilities

• Support clients in the design and implementation of privacy programs, including data protection impact assessments (DPIAs), data inventory mapping and risk assessments.
• Work with clients to develop and implement data governance frameworks.
• Participate in data classification engagements covering data discovery, classification schema and implementation of classification controls.
• Support the development and execution of clients' IT security and privacy programs aligned with ISO 27001, ISO 27701 and other regulatory frameworks.
• Assist clients in achieving and maintaining ISO 27001 and ISO 27701 certification, including conducting internal audits, risk assessments and supporting security documentation.
• Communicate effectively with senior stakeholders and advise on key issues related to privacy, security and governance.
• Assist in developing awareness programs so employees understand and follow data protection policies and best practices.
• Stay up to date with emerging privacy and IT security regulations, industry trends and evolving threats.

Requirements

• Bachelor's degree or equivalent in Information Technology, Data Science, Business or a related field.
• 2-3 years of experience in data privacy and governance and information security roles.
• Hands-on experience implementing data privacy and IT security frameworks in client environments.
• Demonstrated understanding of global data protection regulations.
• Experience working with data classification tools and technologies.
• ISO 27000 series certification (ISO 27001, ISO 27701 or related) is preferred.
• Strong analytical and problem-solving abilities.
• Excellent communication skills with the ability to interact with senior stakeholders.
• Project management experience and ability to lead multiple projects simultaneously.

Skills

• Data Classification
• Data Governance
• Data Privacy
• ISO 27001
• ISO 27701
• IT Security
• Risk Assessment