GDPR Senior Data Protection Consultant

Jefferson Wells is seeking a knowledgeable and experienced Data Privacy Consultant to join our team. The ideal candidate will have expertise in Quebec Law 25 (formerly known as Bill 64) and a deep understanding of GDPR, particularly Law 25 provisions. The consultant will play a crucial role in ensuring compliance with data privacy regulations, advising on policies and procedures, and supporting the organization in responding to privacy-related matters.

Location: Remote

Hourly Rate: $55 USD W2 or higher (negotiable depending on experience)

Duration: 3+ months

Key Responsibilities

Review and approve policies and procedures to ensure alignment with the goals and needs of the virtual team and the organization. Participate in the development of Privacy Impact Assessments (PIAs) to identify and mitigate privacy risks associated with data processing activities. Advise the organization during data breaches, providing guidance on incident response and mitigation strategies. Respond to privacy rights requests, including the right to be forgotten, ensuring compliance with applicable laws and regulations. Identify data assets, risks, and requirements of the team, considering relevant laws and regulations governing data processing and transfer. Communicate and educate team members on data protection principles, standards, and best practices. Monitor and evaluate the effectiveness of the data privacy strategy, recommending improvements as needed.

Qualifications

In-depth knowledge of Quebec Law 25 (formerly known as Bill 64) and GDPR, with a focus on Law 25 provisions. Prior experience developing data maps and conducting Privacy/Transfer Impact Assessments. Familiarity with notification requirements specified in Quebec's Law 25. Intermediate Excel skills for data analysis and reporting purposes. Strong analytical and problem-solving skills, with attention to detail. Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams. Ability to work independently and manage multiple tasks simultaneously.

Education/Experience

Bachelor's degree in Law, Business, Information Technology, or related field. Minimum of 3-5 years of experience in data privacy compliance or related field. Professional certification in data privacy (e.g., CIPP/E, CIPM) is a plus.