GDPR Compliance Consultant
About The Position
The GDPR Compliance Consultant serves as a trusted advisor, helping organizations achieve and maintain compliance with the EU GDPR and UK GDPR. The consultant works with executive leadership, legal counsel, privacy teams, IT, security, HR, and business stakeholders to conduct privacy assessments, develop compliance programs, prepare documentation, and implement practical privacy governance processes. The role requires deep knowledge of international privacy regulations, consulting experience, and the ability to translate legal requirements into actionable business controls. This is a contractor/1099, project-based role with a pay range of $100–$125 per hour. Success is measured by delivering engagements on time and within scope, producing high-quality documentation, helping clients progress toward compliance, maintaining client satisfaction, identifying privacy risks and practical remediation strategies, building trusted executive relationships, and staying current with evolving privacy requirements.
Requirements
- Bachelor's degree in Information Security, Privacy, Law, Business, Computer Science, Healthcare Administration, or a related field, or equivalent professional experience.
- At least five years of GDPR consulting or privacy compliance experience.
- Demonstrated experience implementing GDPR compliance programs.
- Experience conducting GDPR readiness assessments and gap analyses.
- Experience preparing and maintaining ROPA documentation.
- Experience performing DPIAs, LIAs, and TIAs.
- Experience drafting and reviewing Data Processing Agreements.
- Experience developing privacy governance programs.
- Experience advising executive leadership and client stakeholders.
- Strong working knowledge of EU GDPR and UK GDPR.
- Strong working knowledge of ROPA, DPIAs, LIAs, TIAs, DSARs, DPAs, international data transfers, EU SCCs, UK IDTA/Addendum, the EU-U.S. Data Privacy Framework, vendor risk management, Privacy by Design, privacy governance frameworks, Article 27 representative requirements, consent management, privacy notices, data mapping, data retention, and special category data processing.
- Excellent written and verbal communication skills and the ability to work directly with executive-level clients.
- Core competencies include privacy consulting, regulatory interpretation, risk assessment, executive communication, client relationship management, documentation development, problem solving, project management, cross-functional collaboration, presentation skills, critical thinking, and attention to detail.
Nice To Haves
- Experience supporting multinational organizations.
- Previous consulting experience.
- Industry experience in healthcare, life sciences, biotechnology, clinical research, pharmaceuticals, medical devices, SaaS, or technology.
- Knowledge of ICH-GCP, clinical trial regulations, informed consent requirements, HIPAA, or processing special category health data.
- One or more certifications: CIPP/E, CIPM, CIPT, ISO/IEC 27701 Lead Implementer, ISO/IEC 27701 Lead Auditor, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, or an equivalent IAPP privacy certification. Professional privacy certification is strongly preferred.
Responsibilities
- Conduct GDPR and UK GDPR readiness assessments, gap analyses, and compliance reviews.
- Develop and implement GDPR compliance programs and remediation roadmaps.
- Prepare and maintain Records of Processing Activities (ROPA).
- Perform Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs).
- Draft, review, and negotiate Data Processing Agreements (DPAs).
- Review privacy notices, consent mechanisms, cookie disclosures, and other privacy documentation.
- Design and implement Data Subject Rights (DSAR) processes.
- Advise clients on international data transfers, including EU Standard Contractual Clauses (SCCs), the UK IDTA/Addendum, and the EU-U.S. Data Privacy Framework.
- Assess third-party privacy risks and support vendor due diligence.
- Develop privacy policies, governance documentation, and operational procedures.
- Support organizations processing special category data, including healthcare and clinical research information.
- Advise on Article 27 representative requirements and supervisory authority interactions.
- Deliver client workshops, executive presentations, and privacy awareness training.
- Collaborate with cybersecurity consultants to align privacy and security controls.
- Stay current with GDPR guidance, enforcement actions, and evolving privacy regulations.
- Advise executive leadership and client stakeholders and build trusted-advisor relationships.
- Deliver consulting engagements on time and within scope, producing high-quality documentation and practical remediation recommendations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Mid Level
