Associate, Risk and Compliance Services

About the Role

Confidentiality & Privacy (C&P) is seeking an Associate to support strategic priorities and mitigate confidentiality and privacy risks across the Deloitte US Firms. The successful candidate will be expected to risk assess technologies for confidentiality and privacy risks, provide impactful contributions to privacy operations, and support compliance activities.

Key Responsibilities

• Conduct confidentiality and privacy impact assessments for technologies by evaluating system controls against established criteria, identifying gaps, documenting findings, and monitoring remediation activities.
• Collaborate with other risk and IT professionals throughout the system development lifecycle to support privacy and data protection compliance.
• Maintain communications with business and Enterprise Solutions stakeholders on confidentiality and privacy matters, including risk identification and issue escalation.
• Support projects, analyses, and leadership reporting that strengthen the US Firms' privacy and confidentiality preparedness.

Requirements & Tech Stack

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others
• Experience with Microsoft 365 applications, including SharePoint, Teams, and OneDrive (Preferred)

Qualifications

• Bachelor's degree and 1+ years of experience in confidentiality, privacy, technology risk, compliance, or risk management.
• Experience conducting privacy, confidentiality, or technology risk assessments for systems, tools, or processes.
• Experience evaluating system controls, identifying gaps, documenting findings, and tracking remediation activities.
• Experience preparing analyses, summaries, reports, or presentations for leadership.
• Ability to travel 0-10%, on average.
• Must be legally authorized to work in the United States without the need for employer sponsorship.
• Certified International Privacy Professional/United States (CIPP/US), Certified Information Privacy Manager (CIPM), or Certified Information Privacy Technologist (CIPT) certification (Preferred)
• Experience in professional services, risk management, client service, or consulting (Preferred)
• Experience producing management reports, presentations, or other leadership-ready deliverables (Preferred)