Associate, Risk and Compliance Services

About the Role

Confidentiality & Privacy (C&P) is seeking an Associate to support the strategic priorities and mitigation of confidentiality and privacy risks across the Deloitte US Firms. The successful candidate will be expected to have experience risk assessing technologies for confidentiality and privacy risks. In this role, in addition to completing risk assessments, they will be expected to provide impactful contributions to privacy operations and compliance activities.

Key Responsibilities

• Conducting confidentiality and privacy impact assessments for technologies by evaluating system controls against established criteria, identifying gaps, documenting findings, and monitoring remediation activities.
• Collaborating with other risk and IT professionals throughout the system development lifecycle to support privacy and data protection compliance.
• Maintaining communications with business and Enterprise Solutions stakeholders on confidentiality and privacy matters, including risk identification and issue escalation.
• Supporting projects, analyses, and leadership reporting that strengthen the US Firms' privacy and confidentiality preparedness.

Requirements & Tech Stack

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others
• Experience with Microsoft 365 applications, including SharePoint, Teams, and OneDrive (Preferred)

Qualifications

• Bachelor's degree and 1+ years of experience in confidentiality, privacy, technology risk, compliance, or risk management
• Experience conducting privacy, confidentiality, or technology risk assessments for systems, tools, or processes
• Experience evaluating system controls, identifying gaps, documenting findings, and tracking remediation activities
• Experience preparing analyses, summaries, reports, or presentations for leadership
• Ability to travel 0-10%, on average, based on the work you do and the clients and industries/sectors you serve.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Certified International Privacy Professional/United States (CIPP/US), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT) certification (Preferred)
• Experience in professional services, risk management, client service, or consulting (Preferred)
• Experience producing management reports, presentations, or other leadership-ready deliverables (Preferred)