Remote opportunity at
RSI SecurityGDPR Compliance Consultant
RSI Security operates as a cybersecurity and compliance advisory firm, assisting businesses across multiple sectors like healthcare, life sciences, financial services, technology, and manufacturing with building…
Career Tools
About This Role
RSI Security operates as a cybersecurity and compliance advisory firm, assisting businesses across multiple sectors like healthcare, life sciences, financial services, technology, and manufacturing with building practical privacy programs. The organization is currently seeking a GDPR Compliance Consultant to act as a trusted advisor, helping clients achieve and sustain adherence to both EU GDPR and UK GDPR regulations. In this capacity, the professional will collaborate closely with executive leadership, legal…
Job Description
RSI Security operates as a cybersecurity and compliance advisory firm, assisting businesses across multiple sectors like healthcare, life sciences, financial services, technology, and manufacturing with building practical privacy programs. The organization is currently seeking a GDPR Compliance Consultant to act as a trusted advisor, helping clients achieve and sustain adherence to both EU GDPR and UK GDPR regulations. In this capacity, the professional will collaborate closely with executive leadership, legal counsel, privacy staff, IT, security, human resources, and business stakeholders.
The person hired for this project-based position will conduct assessments, formulate compliance plans, generate necessary documentation, and put effective privacy governance practices into place. Key duties involve executing readiness reviews, maintaining Records of Processing Activities, executing Data Protection Impact Assessments, and negotiating Data Processing Agreements. This contractor role suits an expert with a strong background in international data privacy who can translate intricate legal mandates into actionable business measures. RSI Security offers project-based contracting with an hourly pay rate ranging from $100 to $125.
Responsibilities
- Perform GDPR and UK GDPR readiness assessments and gap analyses
- Design and execute compliance programs and remediation roadmaps
- Prepare and maintain Records of Processing Activities
- Execute Data Protection Impact Assessments, Legitimate Interest Assessments, and Transfer Impact Assessments
- Draft, review, and negotiate Data Processing Agreements
- Analyze privacy notices, consent mechanisms, cookie disclosures, and privacy paperwork
- Establish processes for Data Subject Rights requests
- Guide clients regarding international data transfer rules including standard contractual clauses and the EU-U.S. Data Privacy Framework
- Evaluate third-party privacy threats and assist with vendor due diligence
- Formulate privacy policies, governance records, and operational guidelines
- Aid entities that process special category data such as healthcare and clinical research information
- Provide advice pertaining to Article 27 representative mandates and supervisory authority interactions
- Lead client workshops, executive presentations, and privacy training sessions
- Work alongside cybersecurity consultants to harmonize privacy and security controls
- Track updates regarding GDPR guidance, enforcement actions, and privacy rules
Requirements
- Five or more years of GDPR consulting or privacy compliance experience
- Demonstrated history of implementing GDPR compliance programs
- Background in conducting GDPR readiness assessments and gap analyses
- Familiarity with preparing and maintaining ROPA documentation
- Experience performing DPIAs, LIAs, and TIAs
- History of drafting and reviewing Data Processing Agreements
- Familiarity with developing privacy governance programs
- Experience advising executive leadership and client stakeholders
- Strong working knowledge of EU GDPR and UK GDPR
- Excellent written and verbal communication skills
- Ability to work directly with executive-level clients
Qualifications
- Bachelor’s degree in Information Security, Privacy, Law, Business, Computer Science, Healthcare Administration, or a related field, or equivalent professional experience
- Experience supporting multinational organizations
- Previous consulting background
- Industry exposure in healthcare, life sciences, biotechnology, clinical research, pharmaceuticals, medical devices, SaaS, or technology
- Knowledge of ICH-GCP, clinical trial regulations, informed consent requirements, HIPAA, and special category health data processing
- Professional certification including CIPP/E, CIPM, CIPT, ISO/IEC 27701 Lead Implementer, ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, or an equivalent IAPP privacy credential
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type and pay rate for this role?
This position is structured as a contractor, 1099, or project-based engagement. The pay range is specified between $100 and $125 per hour.
Where is this job located?
The posting specifies that the role is remote.
What level of experience is required?
Candidates must have five or more years of GDPR consulting or privacy compliance experience, along with a demonstrated history of executing compliance programs, gap analyses, and privacy assessments.
Are specific professional certifications required?
Professional privacy certifications such as CIPP/E, CIPM, CIPT, or equivalent credentials are strongly preferred rather than strictly mandated.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.