Senior Security Consultant - Privacy and Assurance

nccgroup; New York (NY); On-site; USD 120,000 - 190,000; Full time

Job summary

NCC Group is seeking a Senior Security Consultant for US Privacy & Assurance to help clients identify, manage, and reduce privacy and regulatory risk through advisory, assessment, and assurance services.

The role requires leading privacy-focused assessments, including PIAs and risk assessments, and translating complex US privacy requirements into practical controls for healthcare and financial services clients.

Qualifications

• Experience conducting privacy-focused assessments to manage privacy risk.
• Knowledge of US privacy requirements (CCPA/CPRA) and state privacy laws.
• Ability to translate regulatory obligations into practical controls.
• Experience with privacy impact assessments (PIAs) and privacy risk assessments.

Responsibilities

• Lead Privacy Impact Assessments (PIAs) and privacy risk assessments.
• Develop and validate data flow maps for personal information, identifying collection, use, sharing, storage, and retention.
• Evaluate compliance with US privacy regulations and security frameworks.
• Deliver privacy assessments, security and compliance reviews, risk assessments, and assurance engagements across frameworks and regulations.

Job description

The Senior Security Consultant, US Privacy & Assurance is responsible for helping clients identify, manage, and reduce cybersecurity, privacy, and regulatory risk through advisory, assessment, and assurance services. The role provides expert guidance on US privacy regulations, healthcare and financial services requirements, security frameworks, and risk management practices, enabling organizations to protect sensitive information, strengthen governance, and demonstrate compliance with evolving legal and regulatory obligations.

The Senior Security Consultant, US Privacy & Assurance is expected to have deep experience conducting privacy-focused assessments that help organizations understand and manage privacy risk in increasingly complex regulatory environments. This includes leading Privacy Impact Assessments (PIAs) and privacy risk assessments, developing and validating data flow maps to identify how personal information is collected, used, shared, stored, and retained, and evaluating compliance with evolving US privacy requirements. The role requires a strong understanding of privacy-intensive state regulations, including CCPA/CPRA and other emerging state privacy laws, and the ability to translate regulatory obligations into practical business and technical controls. Through these assessments, the consultant helps clients strengthen privacy governance, improve transparency, reduce regulatory risk, and build sustainable privacy programs aligned with business objectives and legal requirements.

Additionally, working collaboratively with clients, technical teams, and business stakeholders, the Senior Security Consultant delivers privacy assessments, security and compliance reviews, risk assessments, and assurance engagements across frameworks and regulations such as CCPA, CMS, HIPAA, HITRUST, NIST, NYDFS, and other applicable US privacy and cybersecurity requirements. The role helps organizations build resilient security and privacy programs by translating complex regulatory and technical requirements into practical, business-focused solutions.

This position plays a key role in supporting NCC Group's mission to create a more secure digital future.

Through trusted client relationships, high-quality project delivery, and thought leadership, the Senior Security Consultant helps clients improve security maturity, manage regulatory risk, and build trust with customers, partners, and regulators. The role contributes directly to client satisfaction, revenue growth, successful engagement delivery, regulatory readiness, and the continued reputation of NCC Group as a trusted cybersecurity and risk management advisor.