Companies you'll love to work for

Position Overview:

The Privacy Specialist serves as a key internal resource for privacy and compliance matters across Entrust. In this role, the Privacy Specialist will proactively manage policies, third party vendors, and program implementation and compliance at Entrust. The Privacy Specialist will manage privacy processes such as DSARs, RoPA, DPIAs, Vendor Reviews, Training and Awareness, Audit and Reporting, and Customer and Business Inquiries.

This role partners closely with Legal, IT, Security, Product, HR, Marketing and other cross-functional stakeholders to enhance and scale privacy practices and streamline workflows.

Responsibilities:

Program Implementation & Project Leadership

• Support the development, maintenance, and periodic review of privacy policies, standards, and operating procedures.

• Lead privacy-related projects from planning through execution, ensuring accountability and timely delivery.

• Conduct and maintain RoPA, DPIAs, and risk assessments to identify and mitigate potential issues.

• Assist with internal and external audits by coordinating information requests, gathering documentation, and maintaining audit readiness.

Privacy Operations & Vendor Oversight

• Handle initial review of privacy inquiries through our legal operations platform, leveraging existing guidance and knowledge repositories to provide first-line responses.

• Conduct third-party vendor and partner privacy reviews and assess risk using established tools and frameworks (e.g., Omnea).

• Monitor the Privacy team inbox, routing issues, escalating concerns, and ensuring timely follow-up.

• Assess incoming Privacy by Design forms, arrange stakeholder engagement, and contribute to assessment readiness.

Additional Duties

• Coordinate privacy training updates and releases, including managing content refresh cycles, and maintaining training records.

• Manage firmwide privacy communications, including drafting announcements, preparing materials, and developing privacy metrics and dashboards.

• Identify opportunities for continuous improvement in Entrust’s privacy program.

Qualifications:

Basic Qualifications

• Bachelor’s degree in Legal Studies, Data Privacy/Science, Information Governance, Business Administration or a related field (or equivalent work experience).

• 2+ years of experience in privacy, compliance, risk, or related roles.

• Working knowledge of major privacy regulations (e.g., GDPR, CCPA) and the ability to apply requirements to operational tasks.

• Experience with vendor oversight processes, including reviewing intake materials and coordinating follow-up responses.

• Familiarity with privacy and workflow management tools (e.g., OneTrust, TrustArc, Omnea, Asana, ServiceNow, JIRA).

• Strong communication and documentation skills, with the ability to collaborate effectively across various functions.

• Experience coordinating cross-functional meetings, preparing materials, and supporting reviews.

Preferred Qualifications:

• Professional certifications such as CIPP/E, CIPP/US, CIPM, or CIPT strongly preferred.

• Strong analytical and problem-solving skills.

• Excellent written and verbal communication, with the ability to influence without authority.

• Ability to navigate and balance risks in ambiguous and complex situations.

• Effective teamwork and collaboration across global and cross-functional teams.

• High motivation and adaptability.

• Strong organizational and stakeholder management skills.

• Ability to interpret numeric data for reporting and risk analysis.

• Comfort using privacy or compliance tools (e.g., OneTrust, TrustArc, Omnea, Asana).

• Strong attention to detail and process-oriented approach.

Job Skills:

• Privacy by Design and Risk Assessment: Ability to apply Privacy by Design principles in evaluating new products, processes, and vendor engagements, supporting consistent integration of privacy considerations across organizational initiatives.

• AI and Machine Learning: Understanding of AI and machine learning models, with a focus on identifying and addressing privacy implications, data use limitations, and ethical considerations.

• Working Knowledge of Privacy Laws: Familiarity with GDPR, BIPA, CCPA/CPRA, and other state-level or global data protection laws. Ability to align program management activities, vendor oversight, and company policies with evolving legal requirements.

• Data Literacy: Strong skills in understanding, interpreting, and working with data, including identifying privacy risks in data collection, management, and use.

• Vendor & Partner Management: Proven ability to conduct due diligence on external vendors and technology partners, ensuring accountability, quality, and compliance with privacy requirements.

• Project Management: Skilled in developing and maintaining project plans, tracking deliverables, and coordinating cross-functional initiatives to support privacy team objectives.

#LI-CV

For US roles, or where applicable:

Entrust is an EEO/AA/Disabled/Veterans Employer

For Canadian roles, or where applicable:

Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities.

If you require an accommodation, contact accessibility@entrust.com.

Recruiter:

Claudia VernonClaudia.Vernon@entrust.com