OneTrust Data Governance & Security Specialist - 2870

Xideral

8d•Remote

About The Position

Seeking an experienced OneTrust Security and Governance Specialist with a minimum of 7 years of experience to join a dynamic team within a leading organization. This role involves implementing and operating the OneTrust platform as the policy and evidence layer of an enterprise data governance program, with a focus on data discovery, privacy, compliance, security, and governance.

Requirements

Over 7 years of experience as a OneTrust Security and Governance Specialist.
Proficient in OneTrust, Data Discovery, and Data Governance.
Proficient in OneTrust Data Use Governance and Control Enforcement.
Proficient in Privacy Automation, RoPA, PIA, DPIA, TIA, DSAR, Incident and Breach Management, and Consent Management.
Knowledge of Risk & Compliance frameworks including ISO 27001, ISO 27701, SOC 2, and NIST CSF.
Proficient in OneTrust REST APIs and webhooks for automation and integrations.
Experience integrating OneTrust with Informatica catalogs.
Knowledge of AWS data environments including S3, Redshift, RDS, and Oracle.
Knowledge of Denodo and data virtualization layers.
Experience with ITSM and collaboration tools such as ServiceNow, Jira, Slack, or Teams.
Working knowledge of GDPR, CCPA, CPRA, LGPD, privacy by design, and data minimization.
Knowledge of data protection techniques including classification, masking, tokenization, encryption, RBAC, and ABAC.
SQL and basic Python or scripting for validation, reconciliation, and automation.
Bachelor’s degree or higher.
Working proficiency in English and Spanish, written and spoken.
Excellent communication, empathy, commitment, leadership, and teamwork skills.

Nice To Haves

OneTrust platform certifications are desirable.
IAPP CIPP/E, CIPP/US, CIPM, or CIPT certifications are desirable.
ISO 27001 Lead Implementer or Lead Auditor certification is desirable.

Responsibilities

Implement and configure OneTrust modules according to privacy and compliance programs.
Onboard data sources, define scan scope and cadence, and tune data classification.
Build and maintain data maps and Records of Processing Activities (RoPA).
Configure data policies, monitor violations, and drive remediation to closure.
Coordinate the application of data controls such as masking, filtering, encryption, and access restrictions.
Configure and operate assessment, DSAR, incident, consent, and privacy workflows.
Implement control frameworks and evidence collection for audits and certifications.
Design and maintain integrations with the surrounding ecosystem, particularly Informatica.
Translate regulatory and policy requirements into OneTrust platform configurations.
Provide L2 and L3 support, troubleshooting scan, integration, workflow, and permission issues.