Data Privacy Architect - One Trust

Role Summary

We are seeking an experienced Data Privacy Architect / Consultant with deep hands-on expertise in OneTrust platform implementation to lead end-to-end deployment of privacy, consent, and governance modules for enterprise clients. The role combines privacy domain consulting with technical OneTrust configuration, enabling clients to operationalize applicable Privacy Laws/Regulation, through scalable, automated, and audit-ready solutions. The role expects to also advise clients on operationalizing GDPR, and other Data Privacy laws/regulations, through OneTrust workflows and controls.

Key Responsibilities

• OneTrust Solution Design & Implementation

  • Lead end-to-end OneTrust implementation across all modules

  • Translate client privacy requirements into OneTrust configurations, workflows, templates, and integrations.

  • Design module-specific blueprints covering data inventory, assessment templates, consent receipts, DSAR intake forms, and risk scoring models.

  • Configure workflows, approval chains, notifications, dashboards, and reports aligned to client governance models.

• Integration & Technical Architecture

  • Define and execute integration architecture between OneTrust and enterprise systems - CRM (Salesforce), ERP (SAP), HRMS (Workday), marketing platforms (Adobe, Marketo), data catalogs (Collibra, Informatica), ITSM (ServiceNow), IAM/CIAM, and data lakes.

  • Configure OneTrust connectors, APIs, webhooks, and SDKs (Web SDK, Mobile SDK) for consent propagation and data discovery.

  • Lead Data Discovery (Data Discovery module) setup for structured/unstructured data scanning, classification, and inventory enrichment.

  • Architect Self-Service Portal (SSP) for business unit onboarding, intake, and assessment workflows.

• Privacy Domain Consulting

  • Advise clients on operationalizing GDPR, and other Data Privacy laws/regulations, through OneTrust workflows and controls.

  • Conduct current-state assessments, gap analyses, and target-state roadmaps for privacy programs.

  • Develop RoPA structures, DPIA templates, consent taxonomies, retention schedules, and cross-border transfer playbooks.

• Stakeholder Engagement & Workshops

  • Facilitate discovery workshops, design reviews, and UAT sessions with DPO, Legal, IT, Security, and business stakeholders.

  • Prepare workshop guides, facilitation scripts, clarification questionnaires, and effort estimation models for RFPs and SOWs.

  • Provide training and enablement for client privacy teams, super users, and administrators on OneTrust modules.

• Project Delivery & Governance

  • Lead implementation phases - Discovery, Design, Build, Test, Deploy, Hypercare - following Agile or hybrid delivery models.

  • Define effort estimates, timelines, RACI matrices, and deliverable artifacts for OneTrust engagements.

  • Manage risks, issues, dependencies, and change requests across multi-stream implementations.

  • Produce audit-ready documentation including configuration guides, runbooks, SOPs, and traceability matrices.

Required Skills & Qualifications

Education & Experience

• Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or related discipline.

• 8-14 years of overall IT/consulting experience with 4+ years of hands-on OneTrust implementation across multiple modules.

• Proven experience leading at least 3-5 full-cycle OneTrust deployments in regulated industries (banking, healthcare, pharma, telecom, energy).

Certifications (Mandatory / Preferred)

• OneTrust Certified Privacy Professional (Mandatory) - across modules such as Privacy Management, Consent, Assessment Automation, DSAR, Data Discovery.

• Combination of certifications from IAPP - CIPT + CIPP/E or CIPM - Mandatory

• CDPSE, ISO 27701 Lead Implementer/Auditor - preferred.

• TOGAF or equivalent architecture certification - added advantage.

• Familiarity with cloud platforms (AWS, Azure, Google Cloud Platform), data architecture, and enterprise integration patterns.

• Understanding of IAM, CIAM, DLP, encryption, and data masking technologies.

Regulatory & Framework Knowledge

• In-depth knowledge of GDPR, CPRA, EU AI Act.

• Familiarity with ISO 27701, NIST Privacy Framework, NIST AI RMF, ISO 42001, SOC 2.

• Understanding of sector regulations - HIPAA, PCI DSS, COPPA

Soft Skills

• Strong consulting and advisory mindset with the ability to engage CXO, DPO, and technical stakeholders.

• Excellent workshop facilitation, requirements elicitation, and storytelling skills.

• Clear, concise, and audit-ready written communication for client deliverables and regulator-facing artifacts.

• Ability to balance strategic advisory with hands-on configuration in fast-paced delivery environments.