Associate, Risk and Compliance Services

About the Role

Confidentiality & Privacy (C&P) is seeking an Associate to support strategic priorities and mitigate confidentiality and privacy risks across the Deloitte US Firms. The role involves risk assessing technologies for confidentiality and privacy risks, contributing to privacy operations, and compliance activities.

Key Responsibilities

• Conducting confidentiality and privacy impact assessments for technologies by evaluating system controls against established criteria, identifying gaps, documenting findings, and monitoring remediation activities.
• Collaborating with other risk and IT professionals throughout the system development lifecycle to support privacy and data protection compliance.
• Maintaining communications with business and Enterprise Solutions stakeholders on confidentiality and privacy matters, including risk identification and issue escalation.
• Supporting projects, analyses, and leadership reporting that strengthen the US Firms' privacy and confidentiality preparedness.

Requirements & Tech Stack

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others
• Microsoft 365 applications, including SharePoint, Teams, and OneDrive

Qualifications

Required:

• Bachelor's degree and 1+ years of experience in confidentiality, privacy, technology risk, compliance, or risk management.
• Experience conducting privacy, confidentiality, or technology risk assessments for systems, tools, or processes.
• Experience evaluating system controls, identifying gaps, documenting findings, and tracking remediation activities.
• Experience preparing analyses, summaries, reports, or presentations for leadership.
• Ability to travel 0-10%, on average.
• Must be legally authorized to work in the United States without the need for employer sponsorship.

Preferred:

• Certified International Privacy Professional/United States (CIPP/US), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT) certification.
• Experience in professional services, risk management, client service, or consulting.
• Experience producing management reports, presentations, or other leadership-ready deliverables.