Senior Consultant – Data Protection & Privacy (GDPR)

Digital Risk Services | Nicosia, Cyprus

Grant Thornton Cyprus is a member firm of Grant Thornton International Limited (GTIL), one of the leading organizations delivering audit, tax, and advisory services. With more than 76,000 Grant Thornton people, across over 156 countries, we are focused on making a difference to clients, colleagues, and the communities in which we live and work.

The Role: Grant Thornton’s Digital Risk Services (DRS) – Business Risk Services (BRS) team is seeking a driven and self-motivated Senior Consultant with a passion for, and experience in, data protection. You will join our team, based in our Nicosia office, which provides cybersecurity, data privacy and penetration testing services. Our team offers a full spectrum of privacy services, from privacy assessments and transformation programmes to data protection outsourcing (including external DPO services) and personal data breach management.

We offer the opportunity to work in a dynamic and challenging professional services environment. Each member of our team is encouraged and supported to develop their own unique talents and gain experience across a wide variety of business sectors, including financial services, the public sector, healthcare and telecommunications. We offer an inclusive and collaborative working environment, with rapid career progression opportunities based on performance and proven ability.

As a Senior Consultant with Grant Thornton, you will be directly involved in client-facing engagements and project delivery, so a client-centric ethic is essential.

The role requires strong client delivery skills, a passion for data protection and a commitment to personal development. It covers three areas: client delivery, business development and people development.

Your key Responsibilities include:

Client Delivery

As a Senior Consultant in the privacy team, you will deliver excellence for clients, including:

• Working on large privacy transformation engagements - these projects often involve working with Grant Thornton colleagues as well as client teams and third-party contractors.
• Delivering high-quality work on multiple small and medium-sized engagements simultaneously, managing your time and priorities across several engagement managers.
• Performing GDPR compliance gap assessments and data protection audits and presenting findings and remediation recommendations to clients.
• Conducting Data Protection Impact Assessments (DPIAs) and Legitimate Interests Assessments (LIAs).
• Documenting and maintaining Records of Processing Activities (RoPA).
• Drafting and reviewing data protection policies, procedures, privacy notices and data processing agreements.
• Advising on international data transfers, including Transfer Impact Assessments (TIAs).
• Supporting clients with personal data breach management, including risk assessment and notifications to the supervisory authority and affected data subjects.
• Handling data subject rights requests.
• Performing third-party and vendor privacy risk assessments.
• Supporting the delivery of outsourced Data Protection Officer (DPO) services.
• Supporting cybersecurity client engagements as required.

People Development

As a people business, we place a strong emphasis on the development of our people. Senior Consultants are expected to be committed to developing themselves and others, including:

• Engaging in course-based and on-the-job training to develop their skillset.
• Supervising, coaching and mentoring junior team members.
• Seeking and acting on feedback and embracing opportunities to grow and develop.

Qualifications, Skills and Attributes for Success

Candidates should be able to demonstrate project management and consulting skills, together with a good working knowledge of IT and data protection. Successful candidates will ideally have a professional services background, with experience of providing practical advice and solutions to organisations facing regulatory and standards-based challenges, in particular under the GDPR. They must have excellent problem-solving and communication skills, and should be naturally inquisitive, with a keenness to learn and broaden their skillset.

IT project managers and information security, regulatory compliance, risk or internal audit professionals with comparable experience will also be considered.

• A minimum of two years’ experience in a data protection role, preferably within a consulting or professional services environment.
• Sound working knowledge of the GDPR and Cyprus Law 125(I)/2018, and familiarity with EDPB guidelines and supervisory authority practice.
• A university degree in law, information technology, business or a related discipline, and/or relevant professional qualifications.
• Excellent verbal and written communication skills in English, with demonstrable experience in a client-facing role.
• Strong analytical and problem-solving skills.
• Strong focus on quality and commitment to excellence.
• Ability to manage multiple engagements and deadlines, working both independently and as part of a team
• A commitment to the CARE values of Grant Thornton: Collaboration, Agility, Respect, and Excellence

Desired experience:

• Experience in data protection consulting, regulatory compliance or risk management.
• A recognised data protection qualification, such as CIPP/E, CIPM or CIPT (IAPP), or ISO/IEC 27001 certification will be considered as an advantage.
• Experience delivering elements of a privacy-related change or transformation programme.

Benefits - We Go Beyond for our people because we care!!

What will we offer to you?

• Friendly and dynamic working environment, in which you can develop your skills and competencies
• A workplace with a strong focus on values and work-life balance and the joint aim to provide the best possible solutions for our clients
• A Learning & Development path, which focuses on both technical & soft skills. You will also have access to coaching and mentoring
• Your professional and personal success is our commitment

Other benefits to support you in every way possible:

• Competitive remuneration and benefits package, including recognition schemes and 13th salary
• Working extra recognition / Bonus scheme
• Medical insurance
• Provident fund
• Paid maternity and paternity leave
• Parental leave allowance
• "Be there for our family paid leave / carer’s leave" scheme
• "Giving back to the community paid time off" scheme
• "Flexible Working Arrangements" scheme
• "Dress For Your Diary" scheme
• Afternoon off on Fridays
• Four-day long weekends in August (all Fridays free)
• “We never miss a public holiday” scheme
• Sponsorship of yearly professional subscriptions
• Several opportunities for professional and personal growth through our Grant Thornton International network

What you will you need to do next?

If you believe that Grant Thornton is the right place for you, you have the right attitude, skills, aspiration for success and share our CARE values we invite you to submit your application online together with uploading your latest CV.