Role purpose
Advise clients on data compliance, privacy, control design, evidence and remediation while escalating legal interpretations and formal approvals to authorized client stakeholders.
Key responsibilities
- Deliver QDKC-aligned client work using the official guides, templates and frameworks relevant to the engagement.
- Assess client evidence, facilitate workshops and produce traceable recommendations or implementation deliverables.
- For client engagements, interpret requirements and translate them into controls, checks and evidence needs.
- Review client evidence and advise on policies, sharing arrangements, classification, retention and data-product practices.
- For client engagements, conduct compliance assessments and track findings, risks and remediation.
- For client engagements, advise projects and operational teams on privacy, security and ethical use.
- Transfer knowledge to client personnel and document decisions, assumptions, dependencies and handover requirements.
- Respect client governance: consultants advise, facilitate and deliver, but do not replace the client's accountable owners, approvers or governance bodies.
Recommended minimum requirements
Education: Bachelor's degree in law, information systems, cybersecurity, risk, audit or a related field.
Experience: Typically 4-8 years in data protection, compliance, audit, governance or technology risk.
Core competencies: Regulatory interpretation, Control design, Privacy operations, Audit evidence, Risk assessment, Clear advisory writing
Preferred certifications
Preferred, but not mandatory:
- IAPP CIPP or CIPM
- CISA or CISM
- CDMP Associate
Focus areas
Regulatory interpretationControl designPrivacy operations
Ready to apply for this role?
Apply for Data Compliance & Privacy ConsultantDon't see the perfect fit?
We're always looking for exceptional people. Send us your CV and tell us how you'd contribute to the DAI mission.