Associate, Risk and Compliance Services - Confidentiality & Privacy Technology Assessment

PowerToFly; Alabama; On-site; USD 52,000 - 96,000; Full time

Job summary

Deloitte is seeking an Associate in the Confidentiality & Privacy team to support risk-based assessments of technologies and to contribute to privacy operations and compliance activities. The role emphasizes independent work, collaboration with IT and risk teams, and timely delivery of analyses and reports.

Qualified candidates have 1+ years in confidentiality, privacy, or technology risk, with strong communication, attention to detail, and a proactive, multi-tasking mindset.

Qualifications

• Bachelor's degree and 1+ years of confidentiality, privacy, technology risk, compliance, or risk management experience
• Experience conducting privacy, confidentiality, or technology risk assessments for systems, tools, or processes
• Experience preparing analyses, summaries, reports, or leadership presentations

Responsibilities

• Conduct confidentiality and privacy impact assessments for technologies by evaluating system controls against established criteria
• Collaborate with risk and IT professionals across the system development lifecycle to support privacy and data protection compliance
• Maintaining communications with business and Enterprise Solutions stakeholders on confidentiality and privacy matters, including risk identification and issue escalation
• Supporting projects, analyses, and leadership reporting that strengthen the US Firms' privacy and confidentiality preparedness

Skills

Independent work

Team collaboration

Communication

Attention to detail

Relationship building

Multitasking

Deadline-driven

Education

Bachelor's degree

Tools

Microsoft 365 suite

Job description

Confidentiality & Privacy (C&P) is seeking an Associate to support the strategic priorities and mitigation of confidentiality and privacy risks across the Deloitte US Firms.

The successful candidate will be expected to have experience risk assessing technologies for confidentiality and privacy risks. In this role, in addition to completing risk assessments, they will be expected to provide impactful contributions to privacy operations and compliance activities.

Recruiting for this role ends on 09/30/2026.

Work you'll do

As an Associate , Risk Compliance (Confidentiality & Privacy) on the Confidentiality & Privacy - Technology Assessment team, you will be responsible for:

• Conducting confidentiality and privacy impact assessments for technologies by evaluating system controls against established criteria, identifying gaps, documenting findings, and monitoring remediation activities.
• Collaborating with other risk and IT professionals throughout the system development lifecycle to support privacy and data protection compliance.
• Maintaining communications with business and Enterprise Solutions stakeholders on confidentiality and privacy matters, including risk identification and issue escalation.
• Supporting projects, analyses, and leadership reporting that strengthen the US Firms' privacy and confidentiality preparedness.

A successful candidate would possess these skills

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

The team

US Confidentiality & Privacy is a highly collaborative team, serving as a trusted advisor to the US Firms Businesses and Enterprise Solutions. C&P's strategic priorities include:

• Advising and consulting on confidentiality and privacy risks
• Monitoring and facilitating compliance with regulatory and legal obligations
• Helping to secure Confidential Information and preventing data loss
• Assisting in the response and management of confidentiality and privacy incidents and insider violations
• Enabling innovative technology to be safely and quickly deployed in support of market opportunities

Qualifications

Required:

• Bachelor's degree and 1+ years of experience in confidentiality, privacy, technology risk, compliance, or risk management
• Experience conducting privacy, confidentiality, or technology risk assessments for systems, tools, or processes
• Experience evaluating system controls, identifying gaps, documenting findings, and tracking remediation activities
• Experience preparing analyses, summaries, reports, or presentations for leadership
• Ability to travel 0-10%, on average, based on the work you do and the clients and industries/sectors you serve.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred:

• Certified International Privacy Professional/United States (CIPP/US), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT) certification
• Experience with Microsoft 365 applications, including SharePoint, Teams, and OneDrive
• Experience in professional services, risk management, client service, or consulting
• Experience producing management reports, presentations, or other leadership-ready deliverables

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $51,900 to $95,500.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.