GDPR Consultant

Work Location
818 Stewart, Suite 400, Seattle, WA 98101
Preferably Seattle, but any location in the US is okay.
Description
Job Description:
The GDPR Consultant will participate in Avanade's General Data Protection Compliance Program and support Avanade's direction for Avanade's Data Protection ( "DP") compliance requirements and activities. The GDPR Consultant will act as the primary point of contact for subsets of GDPR compliance activities and play an active role in driving DP operations, controls, risk management, awareness and improvement across business units.
The GDPR Consultant will report directly to the Global Data Protection Lead. They will be accountable to the Data Protection Officer and GDPR Compliance Program Lead and act at their direction to ensure consistency with Avanade's global DP and IS programs, including strategy, external relations, compliance, and processes. They will collaborate closely with the Data Protection Officer, GDPR Compliance Program Lead, and Information Security teams to obtain information and advice.
Core Responsibilities
Advise on and manage GDPR programs and activities

• Understand the triggers and requirements for performing GDPR activities and processes for executing these (for example, privacy reviews, Data Protection Impact Assessments and recording of processing activities) and participate in such activities where this is part of the defined process
• Work with stakeholders (e.g. Information Security, account teams, other business units) on GDPR requirements, assess compliance gaps and risks as required (for example by providing input on any changes to scope in controls or processes required as a result of DPIA findings)
• Monitor compliance progress by reviewing information provided by data owners through data inventory and data mapping processes
• Support business unit GDPR remediation activities as required

Manage training and awareness

• Actively promote and encourage local engagement (including with senior leadership) on GDPR, including delivering training and awareness programs based on globally packaged materials
• Play an active role in driving GDPR risk management and improvement
• Be able to speak knowledgably on GDPR to business units and direct their queries appropriately
• Identify and engage with relevant stakeholders and work with them to ensure the appropriate controls are in place to protect the assets they are accountable for
• Keep up to date with GDPR guidance and enforcement action, activities of relevant industry and standards associations etc.

Report on Avanade's GDPR program

• In coordination with the Global Data Protection Lead, Data Protection Officer and GDPR Compliance Program Lead, report on agreed GDPR topics as required
• Proactively raise trends, potential threats, concerns or other information with the Data Protection Officer, Data Protection Officer, GDPR Compliance Program Lead and other stakeholders as appropriate
• Primary Skill
• Understand the triggers and requirements for performing GDPR activities and processes for executing
• Compliance Management
• University Degree
• Data privacy certification(s) (e.g. CIPP, CIPM, CIPT)
• It will be an advantage to have a General IS understanding
• English language proficiency
• 
  Other Skills
• Application Security Remediation
• Compliance and Controls Design
• Data Protection & Privacy Impact Assessment
• 
  Good to have:
• prior expert knowledge and experience of Data Privacy law and practices, including CIPP qualifications and/or relevant local privacy qualifications is an advantage
• the ability to take a risk based approach to DP and IS
• the ability to work to high standards of confidentiality and independence and to recognize and act on conflicts of interest
• the ability to provide training on DP and IS topics