JOB DETAIL

Job Summary

BDO RISE is the round-the-clock international services team and is dedicated to providing exceptional client service in the global economy. Our professionals operate seamlessly as part of BDO USA engagement teams, leveraging consistent best practices while accessing our global resources to deliver outstanding service and solutions for our clients. BDO’s Core Purpose is Helping People Thrive Every Day. Our Core Values reflect how we manage our work, our relationships and ourselves. As an employee of the firm, you will live true to our Core Values of people first, being exceptional every day in every way, embracing change, feeling empowered through knowledge, and choosing accountability. Our Core Values are the standards by which we conduct ourselves day in and day out, both internally and externally.

BDO is seeking a Sr. Associate to join its Governance, Risk & Compliance (GRC) Practice. The GRC Practice helps companies to build, manage, and monitor privacy and data protection programs while embedding privacy into Apps, websites, systems, and processes. We offer a variety of services, such as privacy managed services, assessments, Data Protection Officer services, Data Protection by Design and by Default program development, and website compliance. Candidates that are hired will be integral in providing these services for our clients.

Job Duties

Job Responsibilities

• Develop client policies and procedures (e.g., Privacy Notice, Privacy Policies, Data Management)
• Manage and perform individual rights requests/consumer rights requests
• Maintain records of processing, data inventories, data flow diagrams, and/or Article 30 registers
• Conducts privacy maturity assessments and helps document observations, risks, and recommendations in client-facing reports
• Develops client policies and procedures (e.g., Privacy Notice, Privacy Policies, Data Management) based on industry best practices, client privacy standards, and regulatory requirements
• Manages individual rights requests/consumer rights requests fulfillment within given time constraints
• Conducts Privacy Impact Assessments (PIAs) and works with client stakeholders to determine risk remediation plans, as needed
• Assists with the development of privacy training and awareness content
• Conducts data mapping exercises to maintain records of processing, data inventories, data flow diagrams, and/or Article 30 registers
• Provides engagement task management and project management information and metrics to engagement leaders
• Monitors regulatory updates, guidance, and case law to remain current on global regulations and help clients identify areas of opportunity for improving their data privacy practices
• Implements and executes processes using privacy-enhancing technologies such as OneTrust and TrustArc
• Budgets time and assists with multiple project requests simultaneously, as well as monitors project tasks and risks
• Assist with BDO Governance, Risk & Compliance (GRC) projects, as necessary or requested

Qualifications, Knowledge, Skills and Abilities

Education:

• Bachelor's Degree, required
• IAPP or equivalent training, required
• IAPP, ISACA, or other relevant privacy certifications, preferred
• OneTrust certifications, a plus

Experience and Skills:

• 2-3 years of experience in management consulting, technology advisory, or technology project management, required
• Experience with privacy operations including privacy impact assessments, data mapping, consent management, individual rights, and risk assessments, required
• Advanced knowledge of privacy program management tool features and functionality (e.g., OneTrust, TrustArc, Priva, Securiti.ai), required
• Experience configuring forms, templates, and workflows in privacy program management tools, required
• Experience in privacy program management tool data migrations, required
  • Experience with scripting tools and languages including JavaScript, Python, PowerShell, required
  • Basic technical skills: Microsoft Suite proficiency (Microsoft Excel, Word, PowerPoint, Visio, SharePoint, Teams, OneDrive, PDF)
  • Advanced understanding of workflow technologies/privacy platforms ((OneTrust, TrustArc, Priva, Securiti.ai)
  • Understanding of privacy regulations and obligations
  • Ability to thrive in a fast-paced environment to meet client and regulatory deadlines
  • Ability to self-manage daily tasks and proactively identify next steps for assignments
  • Organized and proficient at managing multiple sources of data and information
  • Ability to work in a team environment