Position Title: GDPR Compliance Readiness & Assessment Consultant
Location: Hybrid / Remote / Onsite as Required
Department: Cybersecurity, Risk & Compliance
Reports To: Director of Security, Compliance, or Data Privacy Officer
Position Summary
We are seeking an experienced GDPR Compliance Readiness & Assessment Consultant to evaluate, assess, and guide enterprise organizations through data privacy and regulatory compliance initiatives aligned to the European Union’s General Data Protection Regulation (GDPR). This individual will perform system readiness assessments, identify compliance gaps, evaluate business processes and technologies handling personal data, and provide strategic remediation recommendations across IT, security, legal, and operational teams.
The ideal candidate combines strong knowledge of privacy regulations, cybersecurity controls, enterprise systems, governance frameworks, and risk management methodologies with the ability to communicate effectively to both technical and executive stakeholders.
Key Responsibilities
Conduct GDPR readiness assessments across enterprise applications, infrastructure, cloud environments, and business processes
Evaluate organizational handling of Personally Identifiable Information (PII) and sensitive data
Perform data flow mapping and data inventory assessments
Assess compliance with GDPR principles including:
Data minimization
Right to access
Right to be forgotten
Consent management
Data retention
Privacy by design
Review security controls related to:
Identity & access management
Encryption
Logging & monitoring
Incident response
Data loss prevention
Conduct gap analyses against GDPR regulatory requirements and industry frameworks
Develop remediation roadmaps and compliance improvement plans
Partner with Legal, Security, Infrastructure, Application, Cloud, and Business teams
Review third-party/vendor data processing agreements
Never miss an opportunity! Create an alert based on the job you applied for.