Privacy and Data Protection Consultant | Full GRC

Job Description

Overall Function Vision

We are looking for a highly qualified Full GRC Privacy and Data Protection Consultant to work on projects related to privacy and data protection. This professional will be responsible for assisting our clients in implementing and maintaining privacy programs, ensuring compliance with regulations such as LGPD, GDPR, and other applicable standards, as well as correcting attention points and ensuring that data processing systems are secure and compliant.

Main Responsibilities

• Attention Point Correction: Evaluate and correct non-conformities and attention points identified in privacy audits, conformity evaluations (gap analyses), and impact assessments on data protection (DPIAs/RIPDs).
• Implementation of Privacy and Data Protection Controls: Develop, implement, and coordinate the execution of robust technical and organizational controls aligned with privacy regulations and market best practices (e.g., ISO 27701, NIST Privacy Framework).
• Data Privacy Risk Management: Conduct continuous risk assessments, including Data Protection Impact Assessments (DPIAs/RIPDs), and propose mitigation measures to prevent privacy incidents and data breaches, including managing supplier risks with the team.
• Documentation and Reporting: Map existing documentation, as well as develop and maintain essential documentation, such as privacy policies, terms of use, records of data processing operations (ROPA), conformity reports, reports for regulatory authorities, and contract reviews.
• Privacy Consultancy and Training: Provide technical guidance and training to colleagues on the principles of privacy, regulatory requirements (LGPD, GDPR), and best practices in data protection.
• Support to DPO/Controller: Collaborate with the Data Protection Officer (DPO) in managing requests from data subjects, committees that the DPO participates in, responses to security incidents impacting personal data, and communication with authorities.
  

Culture and Values

We are looking for a professional who shares our commitment to ethics, privacy, and compliance, who is proactive and solution-oriented. Our work environment is collaborative, and we encourage continuous professional growth and development.