CTRP Senior Associate Privacy

Participate in cybersecurity, technology risk, and privacy assessments and audits against industry standards and regulations such as NIST, GDPR, HIPAA/HITECH, PCI, CCPA, and similar state laws. Plan, execute, direct and complete privacy assessments and audits against various frameworks. Perform activities such as data mapping, data classifications, data privacy impact assessments, etc. Assist in creating Privacy programs and remediation strategies for clients including helping to define, update, maintain, and enhance privacy compliance program requirements for clients. Understand how privacy technologies can serve as an enabler for privacy program operations and assist with deployment of privacy-enhancing technologies. Assess emerging technologies such as blockchains, IoT, ML, AI for cybersecurity and privacy risks. Work with various proposal teams to develop proposals related to cybersecurity, technology risk, and privacy services. Work with various partners and technology vendors to develop joint solutions. Requires 10% domestic travel. Role is hybrid allowing periodic work from home within reasonable commuting distance of the New York, NY office.

SALARY: $172,827-$173,827 per year

LOCATION: CohnReznick Advisory LLC, 1301 6th Ave., New York, NY 10019

REQUIREMENTS: Bachelors degree in Finance, Economics, Enterprise Risk Management or related field of study and three (3) years of experience as a Consultant, Investment Bank Intern or related role where required experience gained.

SPECIAL SKILLS: Also requires experience in the following: Advanced Privacy certifications e.g., Certified Information Privacy Professional (CIPP), Certified Information Privacy Technologist (CIPT), Certified Information Privacy Manager (CIPM), Certified Data Privacy Solution Engineer (CDPSE), or equivalent; Frameworks and privacy-related concerns across industries such as healthcare (e.g., HIPAA), finance (e.g., GLBA, NYDFS, FFIEC), technology (e.g., GDPR, CCPA), and education (e.g., FERPA), with a focus on compliance, data protection, and secure data handling practices; Two (2) years of hands-on operational privacy experience aiding enterprises comply with privacy laws, statutes, policies, and regulatory documents to safeguard Personally Identifiable Information (PII) and electronic Protected Health Information (ePHI); Working knowledge of data encryption, access controls, data retention policies, and secure data transfer mechanisms; Demonstrated ability to conduct evaluation of privacy program, identify privacy risks, and implement controls across clinical systems, electronic health records (EHRs), financial platforms, and third-party data processors;

Privacy program management, compliance, and audit (can be either as an auditor or with experience interacting with auditors); Platform experience: OneTrust, InfoSec IQ, BigID, Magellan, Talend, or similar; and Producing high-quality deliverables, reports, and presentations for client management and technology partners.

BENEFITS: Medical, dental, and vision plans, plus complimentary access to physical and mental health resources; 401(k) with employer match and profit-sharing contributions; Generous PTO (starting at 4 weeks), plus 17 paid holidays, including July 4th and Thanksgiving weeks off; Up to 8 weeks of paid parental leave following birth, adoption, or foster care placement; Expansive Learning & Development programs that help you skill, upskill, and grow your career.

CONTACT: Send resume via email to US. [email protected] with the position title and location in the subject line.

CohnReznick is an equal opportunity employer. For more information, please see Equal Employment Opportunity Posters.