Senior Analyst - Data Protection Assessor
Do you have experience of either data privacy, or cyber security and technical controls? Do you have experience of performing technical assessments or auditing? Do you have attention to detail and an ability to ask questions to find out more? Can you interpret technical and business documentation to extract, understand and communicate relevant information? Do you have experience of working with security and privacy laws and regulations in India, the Asia-Pacific region, and/or Globally (e.g., GDPR, PIPA, APPI CPRA)? Want to work for a world-class organization that provides an exceptional career experience with an inclusive and collaborative culture?
Work you'll do
Data Risk Assessment Services is within our Global Confidentiality & Privacy Office, which is part of our Global Risk & Brand Protection (R&BP) organization. You will provide specialized confidentiality and privacy support, advice, and guidance.
- Assess and advise on the data risk elements of global services and technologies based on a defined process addressing privacy, confidentiality, and technical controls.
- Mediating between the technology teams and regional member firm stakeholders to provide clarity.
- Delivering data risk assessments used by regional stakeholders to determine their risk/adoption strategy.
- Managing a portfolio of engagements with competing demands and project deadlines.
- Act as a trusted advisor with business and technology teams, as well as member firm stakeholders, to provide data risk consult and guidance
- Manage ongoing privacy compliance and consultative activities with an eye towards creating process efficiencies wherever possible
- Help define, update, maintain, and enhance privacy compliance and consultative program requirements
- Support privacy consultations and compliance reviews, and oversee remediation activities across the global network
- Provide subject matter expertise insight on a variety of privacy-related programs, initiatives, and workflows (e.g., notices, assessments, cookies/consent management, third-party requirements, incident management, etc.)
- Assist business and technology teams with incorporating Privacy/Data by Design techniques and principles into business processes and technologies
Experience: 3-6 Years
Location: Hyderabad
Work Timings: 11AM to 8PM OR 2PM TO 11PM IST based on business need.
The team
Global Risk & Brand Protection protects, preserves and enhances the Deloitte brand. We navigate the dynamic risk landscape across the areas of risk management, confidentiality & privacy, cyber security oversight, regulatory, independence & conflicts, and Anti-Corruption/financial crimes. We foster trusting relationships across the Deloitte network through collaboration, facilitation and responsive guidance.
Qualifications
- Experience in conducting and delivering privacy impact assessments (PIA)
- Privacy, confidentiality, legal, data risk/security and/or technology experience.
- Experience of advising on privacy and confidentiality matters such as working with technology implementation teams
- Strong knowledge and awareness of global privacy laws, rules, and regulations within at least one jurisdiction such as the GDPR, LGPD, CCPA, CPRA, CDPA, CPA, HIPAA, GLBA, and COPPA
- High-level understanding of technology and security issues impacting privacy programs
- Extensive experience and strong understanding of privacy impact assessments (PIA), Privacy/Data by Design concepts, tools, and methodologies
- Strong professional services orientation: must deliver quality, have demonstrated ability to build stakeholder relationships, conduct privacy stakeholder interviews and lead working sessions, and leverage excellent communication skills with executive presence
- Excellent program management skills: proven ability of driving issues to resolution, strong independent judgment, and ability to evaluate risk
- Adaptable and resilient: strong problem-solving abilities, flexible, able to navigate transformational growth and ambiguity, show initiative and anticipate needs, and able to focus on multiple workstreams at once
- Ability to prioritize tasks, work on multiple assignments, and raise concerns/questions where appropriate.
- Bachelor’s Degree
- Minimum of 3 years’ related experience
- Certification in Privacy (e.g., CIPP, CIPT, CIPM, CDPSE, certification) preferred
- Proficiency in MS Office - PowerPoint, Word, and Excel
- Legal experience is useful although knowledge of GDPR and similar constructs is adequate
Other Qualifications:
- Strong awareness of ongoing and recent developments across the privacy landscape
- Experience and strong understanding of privacy concepts such as data access governance, data classification, data discovery, encryption, masking, tokenization, information rights management, and data loss prevention
- Practical experience of applying privacy obligations operationally
- Understanding of broader audit, risk, and compliance capabilities and considerations
How you’ll grow
Deloitte Global inspires leaders at every level. We believe in investing in you, helping you embrace leadership opportunities at every step of your career, and helping you identify and hone your unique strengths. We encourage you to grow by providing formal and informal development programs, coaching and mentoring, and on-the-job challenges. We want you to ask questions, take chances, and explore the possible.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Deloitte’s Total Rewards program reflects our continued commitment to lead from the front in everything we do — that’s why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being needs. We provide the benefits, competitive compensation, and recognition to help sustain your efforts in making an impact that matters.
Deloitte’s Global culture
At Deloitte, we expect results. Incredible—tangible—results. And Deloitte Global professionals play a unique role in delivering those results. We reach across disciplines and borders to serve our global organization. We are the engine of Deloitte. We develop and lead global strategies and provide programs and services that unite our network.
In Deloitte Global, everyone has an opportunity to lead. We see the importance of your perspective and your ability to create value. We want you to fit in—with an inclusive culture, focus on work-life fit and well-being, and a supportive, connected environment; but we also want you to stand out—with opportunities to have a strategic impact, innovate, and take the risks necessary to make your mark. Deloitte Global supports our talented professionals in answering the question: What impact will you make?
Corporate citizenship
Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Deloitte’s impact on the world.