Data Privacy Architect - One Trust and CIPT

Role Summary

We are seeking an experienced Data Privacy Architect / Consultant with deep hands-on expertise in OneTrust platform implementation to lead end-to-end deployment of privacy, consent, and governance modules for enterprise clients. The role combines privacy domain consulting with technical OneTrust configuration, enabling clients to operationalize applicable Privacy Laws/Regulation, through scalable, automated, and audit-ready solutions. The role expects to also advise clients on operationalizing GDPR, and other Data Privacy laws/regulations, through OneTrust workflows and controls.

Key Responsibilities

• OneTrust Solution Design & Implementation
  
  
  
  • Lead end-to-end OneTrust implementation across all modules
  
  
  • Translate client privacy requirements into OneTrust configurations, workflows, templates, and integrations.
  
  
  • Design module-specific blueprints covering data inventory, assessment templates, consent receipts, DSAR intake forms, and risk scoring models.
  
  
  • Configure workflows, approval chains, notifications, dashboards, and reports aligned to client governance models.
  
  
  
  


• Integration & Technical Architecture
  
  
  
  • Define and execute integration architecture between OneTrust and enterprise systems – CRM (Salesforce), ERP (SAP), HRMS (Workday), marketing platforms (Adobe, Marketo), data catalogs (Collibra, Informatica), ITSM (ServiceNow), IAM/CIAM, and data lakes.
  
  
  • Configure OneTrust connectors, APIs, webhooks, and SDKs (Web SDK, Mobile SDK) for consent propagation and data discovery.
  
  
  • Lead Data Discovery (Data Discovery module) setup for structured/unstructured data scanning, classification, and inventory enrichment.
  
  
  • Architect Self-Service Portal (SSP) for business unit onboarding, intake, and assessment workflows.
  
  
  
  


• Privacy Domain Consulting
  
  
  
  • Advise clients on operationalizing GDPR, and other Data Privacy laws/regulations, through OneTrust workflows and controls.
  
  
  • Conduct current-state assessments, gap analyses, and target-state roadmaps for privacy programs.
  
  
  • Develop RoPA structures, DPIA templates, consent taxonomies, retention schedules, and cross-border transfer playbooks.
  
  
  
  


• Stakeholder Engagement & Workshops
  
  
  
  • Facilitate discovery workshops, design reviews, and UAT sessions with DPO, Legal, IT, Security, and business stakeholders.
  
  
  • Prepare workshop guides, facilitation scripts, clarification questionnaires, and effort estimation models for RFPs and SOWs.
  
  
  • Provide training and enablement for client privacy teams, super users, and administrators on OneTrust modules.
  
  
  
  


• Project Delivery & Governance
  
  
  
  • Lead implementation phases – Discovery, Design, Build, Test, Deploy, Hypercare – following Agile or hybrid delivery models.
  
  
  • Define effort estimates, timelines, RACI matrices, and deliverable artifacts for OneTrust engagements.
  
  
  • Manage risks, issues, dependencies, and change requests across multi-stream implementations.
  
  
  • Produce audit-ready documentation including configuration guides, runbooks, SOPs, and traceability matrices.
  
  
  
  

Required Skills & Qualifications

Education & Experience

• Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or related discipline.


• 8-14 years of overall IT/consulting experience with 4+ years of hands-on OneTrust implementation across multiple modules.


• Proven experience leading at least 3-5 full-cycle OneTrust deployments in regulated industries (banking, healthcare, pharma, telecom, energy).

Certifications (Mandatory / Preferred)

• OneTrust Certified Privacy Professional (Mandatory) – across modules such as Privacy Management, Consent, Assessment Automation, DSAR, Data Discovery.


• Combination of certifications from IAPP – CIPT + CIPP/E or CIPM (Mandatory)


• CDPSE, ISO 27701 Lead Implementer/Auditor – preferred.


• TOGAF or equivalent architecture certification – added advantage.


• Familiarity with cloud platforms (AWS, Azure, GCP), data architecture, and enterprise integration patterns.


• Understanding of IAM, CIAM, DLP, encryption, and data masking technologies.

Regulatory & Framework Knowledge

• In-depth knowledge of GDPR, CPRA, EU AI Act.


• Familiarity with ISO 27701, NIST Privacy Framework, NIST AI RMF, ISO 42001, SOC 2.


• Understanding of sector regulations – HIPAA, PCI DSS, COPPA.

Soft Skills

• Strong consulting and advisory mindset with the ability to engage CXO, DPO, and technical stakeholders.


• Excellent workshop facilitation, requirements elicitation, and storytelling skills.


• Clear, concise, and audit-ready written communication for client deliverables and regulator-facing artifacts.


• Ability to balance strategic advisory with hands-on configuration in fast-paced delivery environments.