JOB DETAIL

Job Summary

BDO RISE is the round-the-clock international services team and is dedicated to providing exceptional client service in the global economy. Our professionals operate seamlessly as part of BDO USA engagement teams, leveraging consistent best practices while accessing our global resources to deliver outstanding service and solutions for our clients. BDO’s Core Purpose is Helping People Thrive Every Day. Our Core Values reflect how we manage our work, our relationships and ourselves. As an employee of the firm, you will live true to our Core Values of people first, being exceptional every day in every way, embracing change, feeling empowered through knowledge, and choosing accountability. Our Core Values are the standards by which we conduct ourselves day in and day out, both internally and externally.

BDO is seeking an Experienced Associate to join its Governance, Risk & Compliance (GRC) Practice. The GRC Practice helps companies to build, manage, and monitor privacy and data protection programs while embedding privacy into Apps, websites, systems, and processes. We offer a variety of services, such as privacy managed services, assessments, Data Protection Officer services, Data Protection by Design and by Default program development, and website compliance. Candidates that are hired will be integral in providing these services for our clients.

Job Duties

Job Responsibilities

• Conduct Privacy Maturity Assessments and help document risks and recommendations
• Conduct Privacy Impact Assessments and Data Protection Impact Assessments
• Fulfill individual rights/data subject requests and regulatory inquiries and complaints
• Develop aspects of the client policies and procedures (e.g., Privacy Notice, Privacy Policies, Data Management)
• Assist with individual rights requests/consumer rights requests fulfillment
• Assist with completing Privacy Impact Assessments (PIAs) and follow up with clients stakeholders, as needed
• Assist with the development of privacy training and awareness content
• Assist with maintaining records of processing, data inventories, data flow diagrams, and/or Article 30 registers
• Monitor regulatory updates, guidance, case law, etc. and utilize tools (e.g., DataGuidance) for providing updates to BDO PrivacyWatch(R)
• Review online privacy notices and consent functionality to provide compliance recommendations.
• Draft presentations of BDO work product to client
• Create initial project plans for client, help in identifying key issues and making recommendations to address issues, and reviewed by the engagement manager
• Participate in the review of internal controls based on frameworks such as U.S. states, NIST, GDPR, HIPAA, and ISO frameworks and laws
• Assist with other BDO Governance, Risk & Compliance (GRC) projects, as necessary or requested

Qualifications, Knowledge, Skills and Abilities

Education:

• Bachelor's Degree, required
• IAPP or equivalent training, a plus
• IAPP or other relevant privacy certifications, a plus

Experience and Skills:

• 1 year of professional services and privacy experience through an internship or professional services, required
• Experience with Privacy Enhancing Tools (PET) - OneTrust, TrustArc, preferred
• Experience with Privacy Enhancing Tools (PET) - OneTrust, TrustArc, a plus
• Experience with online software solutions, preferred
• Basic technical skills: Microsoft Suite proficiency (Microsoft Excel, Word, PowerPoint, Visio, SharePoint, Teams, OneDrive) and
• Standard PDF tools
• Moderate level of experience or ability to learn workflow technologies/privacy platforms
• Ability to thrive in a fast-paced environment to meet client and regulatory deadlines
• Ability to self-manage their daily tasks
• Organized and proficient at managing multiple sources of data and information
  • Ability to work in a collaborative environment