Privacy and Compliance SME

Job Title: Privacy and Compliance SME

Location: San Francisco, Arlington, VA, Denver, CO, Chicago, Boston, NYC, Houston, Miami, Los Angeles, Seattle, Dallas, Atlanta, GA, Minneapolis, MN, Birmingham, MI or Irvine, CA - Must work EST
 
Length: 3-6 months - extensions expected
 
Priority Skills:

Strong knowledge of privacy laws: Understands GDPR, U.S. state privacy laws, cookie consent, GPC, and sensitive data.
Ability to turn regulations into practical requirements: Can explain what each law means for cookie banners, consent choices, data collection, retention, and system behavior.
Strong cross-functional leadership: Works effectively with Legal, Technology, Marketing, Security, and regional teams to make decisions, manage risk, and keep the organization compliant.
OneTrust experience is a strong plus, especially with cookie classification, consent banners, preference centers, geolocation rules, and reporting.
Role Requirements:
Lead functional privacy and compliance activities for enterprise consent and preference-management initiatives, with primary focus on OneTrust cookie consent, authenticated preference centers and consumer privacy requirements. Translate privacy regulations and Legal guidance into functional requirements, business rules, controls and operational procedures. Validate consent and preference enforcement across digital and marketing platforms, and support implementation readiness, UAT, compliance sign-off and post-launch governance.

KEY RESPONSIBILITIES
• Assess existing privacy practices and identify regulatory, process and control gaps.
• Translate GDPR, CCPA/CPRA, U.S. state privacy laws, privacy and other applicable requirements into functional requirements.
• Support privacy-impact assessments, privacy-by-design reviews, data mapping, data minimization and retention requirements.
• Review privacy notices, cookie policies, data-collection practices and third-party data-sharing activities.
• Define requirements for consumer privacy rights, including access, deletion, correction and sale/share opt-out requests.
• Define cookie-consent requirements covering banners, categories, trackers, regional rules, GPC signals and consent withdrawal.
• Define authenticated preference-center requirements for email, SMS, phone, push, topics, brands and communication frequency.
• Establish rules for managing anonymous cookie choices and known customer preferences after login.
• Review and recommend OneTrust configurations for privacy assessments, cookie consent, consent records and preference management.
• Ensure privacy choices and opt-outs are honored across CRM, CDP, marketing, analytics, advertising and communication platforms.
• Lead functional testing, UAT, compliance validation and business sign-off.
• Develop privacy governance procedures, control documentation, reporting and training materials.

REQUIRED QUALIFICATIONS
• Five or more years of experience in privacy, compliance, data governance, or consent management.
• Strong understanding of GDPR, CCPA/CPRA, cookie regulations, Global Privacy Control, and consumer privacy rights.
• Hands-on functional experience with OneTrust, including Cookie Consent/CMP and Consent & Preference Management.
• Experience supporting privacy-impact assessments, privacy controls, and regulatory compliance reviews.
• Experience defining cookie-consent and authenticated preference-center requirements.
• Ability to create functional requirements, process flows, compliance matrices, test cases, and operating procedures.
• Strong collaboration skills across Privacy, Legal, Marketing, Product, Data and Technology teams.

TOOLS AND PLATFORMS
• Required: OneTrust Privacy Management, Cookie Consent/CMP, and Universal Consent & Preference Management.
• Preferred: Adobe Experience Platform, RT-CDP, Adobe Journey Optimizer, AEM, Adobe Analytics and Marketo.
• Experience with other privacy or consent platforms is beneficial.

PREFERRED CERTIFICATIONS
• IAPP CIPP/US, CIPP/E or CIPM.
• OneTrust Privacy and Consent certification.
--