Data Privacy Architect

Scope of work

• Design, support, and mature enterprise data privacy frameworks, operating models, governance processes, standards, templates, workflows, and reporting mechanisms.
• Provide hands-on privacy program support across Records of Processing Activities (ROPA), Privacy Impact Assessments (PIA), Privacy Threshold Assessments (PTA), Data Subject Access Requests (DSAR), privacy risk assessments, privacy-by-design reviews, consent reviews, cookie compliance reviews, vendor privacy reviews, and privacy incident support.
• Lead and support privacy assessments by gathering requirements, documenting processing activities, identifying personal data elements, assessing privacy risks, defining mitigation actions, and tracking closure of recommendations.
• Develop and maintain ROPA, data inventories, data maps, processing purpose documentation, data flow documentation, system inventory references, retention inputs, access considerations, and privacy control mappings.
• Configure, enhance, and support OneTrust modules and capabilities used for privacy program management, including assessment automation, data discovery, data classification, data mapping, data lineage, data inventory, privacy rights request management, consent management, cookie compliance, privacy incident management, third-party risk, policy and notice management, reporting, dashboards, integrations, and workflow automation.
• Design OneTrust workflows, questionnaires, assessment templates, approval flows, notifications, dashboards, reporting views, user access models, and operational procedures to support privacy program needs.
• Work with business stakeholders and application owners to document personal data processing activities, systems, data flows, data sharing patterns, retention needs, lawful basis inputs, access controls, and privacy risks.
• Develop technical solution architecture and implementation guidance for privacy technology solutions, including integration with enterprise systems, data platforms, data governance tools, cloud services, identity platforms, and reporting platforms.
• Design and support Azure cloud integrations for privacy use cases involving Azure Data Lake, Azure Data Factory, Azure APIM, Azure SQL Database, Azure Storage, Azure Databricks, APIs, automation workflows, and secure data movement patterns.
• Support data discovery and data classification activities using OneTrust, Microsoft Purview and related enterprise data governance capabilities.
• Support Microsoft Purview capabilities related to data cataloging, sensitivity labeling, sensitive information identification, data loss prevention, information protection, retention, audit readiness, compliance reporting, and data security investigations where applicable to privacy use cases.
• Define and support data masking, data minimization, data retention, data protection, and secure data handling requirements for privacy-sensitive data across applications, reporting platforms, data lakes, and integration pipelines.
• Collaborate with technical teams to identify where personal data is stored, processed, transferred, reported, retained, masked, encrypted, or shared across business processes and technology platforms.
• Review solution designs, data flows, application onboarding requests, integration approaches, reporting designs, and cloud architecture proposals to identify privacy risks and recommend practical mitigation actions.
• Create privacy requirements, user stories, acceptance criteria, test scenarios, control validation steps, implementation notes, and operational handover materials for privacy-related initiatives.
• Support privacy reporting and dashboards for management visibility, including assessment status, risk status, data inventory coverage, Data Subject Access Request metrics, control remediation status, training completion, and operational trends.
• Develop executive-ready privacy program updates that clearly summarize progress, risks, decisions needed, upcoming milestones, and business impact.
• Design, develop, and maintain Data Privacy eLearning course materials, including training scripts, slide content, knowledge checks, scenario-based examples, job aids, quick reference guides, and learner-friendly explanations of privacy responsibilities.
• Partner with privacy and communications teams to create role-based privacy training content for business users, application owners, data stewards, project teams, developers, and support teams.
• Support privacy awareness campaigns, knowledge-sharing sessions, workshops, stakeholder briefings, and adoption activities to improve understanding of privacy requirements and expected behaviors.
• Develop privacy standard operating procedures, runbooks, playbooks, process maps, process narratives, control checklists, assessment guides, and implementation templates.
• Track privacy risks, issues, actions, decisions, dependencies, and remediation activities through approved project management or work tracking tools.
• Participate in Agile delivery activities, including backlog refinement, sprint planning, user story review, demonstrations, status updates, and acceptance review for privacy-related deliverables.
• Work onsite with business, privacy, legal, security, technology, and data governance stakeholders to drive timely decisions, clarify requirements, resolve blockers, and support adoption of privacy solutions.
• Provide hands-on support during privacy platform enhancements, system integrations, proof-of-concepts, pilots, production releases, operational readiness reviews, and post-implementation stabilization.
• Maintain strong documentation discipline to ensure privacy deliverables are clear, complete, traceable, reusable, and ready for stakeholder review, audit support, and operational handover.

SKILLS / EXPERIENCE REQUIRED

• A Bachelor s degree in Information Technology, Computer Science, Data Management, Privacy, Cybersecurity, Business Administration, or a related field is required. A Master s degree is preferred.
• A minimum of 15 to 20 years of professional experience in data privacy, privacy technology implementation, data governance, risk management, compliance technology, solution delivery, or enterprise technology consulting.
• A minimum of 8 to 10 years of hands-on experience supporting data privacy frameworks, privacy assessments, privacy operations, privacy technology platforms, data discovery, data governance, or privacy-by-design initiatives.
• Extensive experience with data privacy frameworks, privacy governance models, privacy operating procedures, privacy risk management, and privacy control implementation.
• Extensive hands-on experience with OneTrust capabilities, including assessment automation, data discovery, data classification, data mapping, data lineage, data inventory, ROPA, PIA, PTA, DSAR, consent management, cookie compliance, third-party risk, incident management, policy and notice management, reporting, dashboards, workflow configuration, and platform administration.
• Strong experience designing and implementing privacy workflows, questionnaires, templates, approval flows, notifications, dashboards, reports, user roles, and operating procedures within OneTrust or equivalent privacy technology platforms.
• Strong understanding of privacy assessments, including Records of Processing Activities, Privacy Impact Assessments, Privacy Threshold Assessments, Data Subject Access Requests, privacy-by-design reviews, vendor privacy assessments, consent assessments, cookie assessments, and privacy incident assessments.
• Strong technical solution architecture experience with the ability to translate privacy requirements into solution designs, system workflows, data flows, integration patterns, reporting models, and operational procedures.
• Strong experience with Azure cloud integrations, including Azure Data Lake, Azure Data Factory, Azure Storage, Azure SQL Database, Azure Databricks, APIs, secure data movement, and cloud-based reporting or analytics patterns.
• Strong knowledge of data discovery, data classification, sensitive data identification, data lineage, metadata management, data masking, data minimization, data retention, encryption, and privacy-focused data protection controls.
• Hands-on knowledge of Microsoft Purview capabilities related to data catalog, data map, data discovery, sensitive information identification, information protection, sensitivity labels, data loss prevention, audit readiness, retention, compliance reporting, and privacy-related governance use cases.
• Experience working with Microsoft Priva, Microsoft Purview, OneTrust, Informatica Data Privacy Management, Collibra, or equivalent privacy, data governance, and compliance platforms is strongly preferred.
• Strong hands-on experience designing and maintaining OneTrust reporting dashboards.
• Experience integrating OneTrust with enterprise systems using OneTrust APIs, including integration requirements, data mapping, authentication, error handling, audit logging, and operational support procedures.
• Experience supporting Power BI reporting dashboard integration with OneTrust and privacy data sources to provide visibility into personal data inventory, privacy-by-design, privacy risks, assessment progress, Data Subject Access Request metrics, open actions, overdue items, and program performance trends.
• Strong ability to analyze business processes, identify personal data processing activities, document data flows, identify privacy risks, and recommend clear mitigation actions.
• Experience working with application owners, data owners, data stewards, legal teams, privacy teams, security teams, compliance teams, architects, developers, and senior stakeholders.
• Ability to create privacy requirements, user stories, acceptance criteria, privacy control requirements, implementation notes, test scenarios, and operational handover documentation.
• Strong experience preparing privacy program dashboards, management reports, assessment status reports, remediation trackers, Data Subject Access Request metrics, and executive-level program updates.
• Strong communication and presentation skills with the ability to explain privacy, data governance, and technical solution topics clearly to both technical and non-technical audiences.
• Experience designing and creating Data Privacy eLearning materials, including course outlines, slide content, scripts, learner guides, knowledge checks, scenario-based exercises, and quick reference materials.
• Ability to create training materials that are practical, role-based, easy to understand, and aligned with privacy responsibilities for business users, application owners, data stewards, developers, and support teams.
• Strong documentation skills with experience creating process maps, standard operating procedures, runbooks, playbooks, control checklists, privacy assessment guides, workflow diagrams, and stakeholder-ready documentation.
• Experience supporting Agile delivery, backlog management, sprint planning, stakeholder reviews, and project tracking using tools such as Azure DevOps or equivalent platforms.
• Certified Information Privacy Technologist (CIPT) certification is required.
• Certified Information Privacy Professional (CIPP) certification is a plus.
• Additional certifications in privacy management, information security, cloud security, data governance, Microsoft Purview, OneTrust, or Azure cloud technologies are preferred.
• Strong analytical skills, attention to detail, ownership mindset, and ability to work independently in an onsite role with senior stakeholders and cross-functional project teams.
• Commitment to high-quality delivery, privacy-by-design principles, clear stakeholder communication, practical risk management, and continuous improvement of privacy program operations.