GDPR Compliance Strategist

RSI Security; United States; On-site; USD 138,000 - 172,000; Part time

Benefits offered by this job

Contractor-based project work

Job summary

RSI Security is seeking a GDPR Compliance Consultant on a contractor basis to guide EU/UK data protection programs, conduct assessments, and develop governance frameworks. You will work with executives, legal counsel, and IT teams to translate regulatory requirements into practical controls and processes.

The role emphasizes delivering GDPR readiness, DPIAs, DPAs, ROPA, and DSAR workflows, while advising on international data transfers and privacy notices.

Qualifications

• Five (5) or more years of GDPR consulting or privacy compliance experience.
• Experience implementing GDPR compliance programs.
• Experience conducting GDPR readiness assessments and gap analyses.
• Experience preparing and maintaining ROPA documentation.
• Experience performing DPIAs, LIAs, and TIAs.
• Experience drafting and reviewing Data Processing Agreements (DPAs).
• Experience developing privacy governance programs.
• Experience advising executive leadership and client stakeholders.
• Experience supporting multinational organizations is preferred.
• Previous consulting experience strongly preferred.

Responsibilities

• Conduct GDPR and UK GDPR readiness assessments and gap analyses.
• Develop and implement GDPR compliance programs and remediation roadmaps.
• Prepare and maintain Records of Processing Activities (ROPA).
• Perform Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs).
• Draft, review, and negotiate Data Processing Agreements (DPAs).
• Review privacy notices, consent mechanisms, cookie disclosures, and privacy documentation.
• Design and implement Data Subject Rights (DSAR) processes.
• Advise clients on international data transfer requirements including EU SCCs, UK IDTA/Addendum, and EU-U.S. Data Privacy Framework.
• Assess third-party privacy risks and support vendor due diligence activities.
• Develop privacy policies, governance documentation, and operational procedures.
• Support organizations processing special category data, including healthcare and clinical research information.
• Provide guidance regarding Article 27 representative requirements and supervisory authority interactions.
• Deliver client workshops, executive presentations, and privacy awareness training.
• Collaborate with cybersecurity consultants to align privacy and security controls.
• Remain current on GDPR guidance, enforcement actions, and evolving privacy regulations.

Skills

Privacy Consulting

Regulatory Interpretation

Risk Assessment

Executive Communication

Client Relationship Management

Documentation Development

Problem Solving

Project Management

Cross-functional Collaboration

Presentation Skills

Critical Thinking

Attention to Detail

Education

Bachelor's degree (Information Security / Privacy / Law / CS)

Job description

RSI Security is seeking a GDPR Compliance Consultant on a contractor basis to guide EU/UK data protection programs, conduct assessments, and develop governance frameworks. You will work with executives, legal counsel, and IT teams to translate regulatory requirements into practical controls and processes.

The role emphasizes delivering GDPR readiness, DPIAs, DPAs, ROPA, and DSAR workflows, while advising on international data transfers and privacy notices.