Strong understanding of GDPR and CCPA/CPRA
Data privacy and data protection compliance
Data mapping & data flow analysis
PIA/DPIA and privacy risk assessments
RoPA (Records of Processing Activities)
Data classification and PII identification
Data subject rights / DSAR processes
Consent management
Third-party/vendor privacy assessments
Cross-border data transfers and TIA/SCC
Privacy policies, procedures and compliance documentation
Business & functional requirements gathering
BRD/FRD, user stories and acceptance criteria
Process mapping AS-IS / TO-BE
UAT and test-case preparation
Stakeholder management across Legal, Compliance, IT, Security and Business
Agile/Scrum, JIRA and Confluence
OneTrust experience strongly preferred
CIPP/US, CIPP/E, CIPM or similar certification preferred