Ethics & Compliance Specialist - Privacy

About the Team

You are someone who thrives in a high-performance environment, bringing a growth mindset and entrepreneurial spirit to tackle meaningful challenges that have a real impact. In return for your drive, determination, and curiosity, we’ll provide the resources, mentorship, and opportunities to help you quickly broaden your expertise, grow into a well-rounded professional, and contribute to work that truly makes a difference.

When you join us, you will have:

• Continuous learning: Our learning and apprenticeship culture, backed by structured programs, is all about helping you grow while creating an environment where feedback is clear, actionable, and focused on your development. The real magic happens when you take the input from others to heart and embrace the fast-paced learning experience, owning your journey.
• A voice that matters: From day one, we value your ideas and contributions. You’ll make a tangible impact by offering innovative ideas and practical solutions, all while upholding our unwavering commitment to ethics and integrity. We not only encourage diverse perspectives, but they are critical in driving us toward the best possible outcomes.
• Global community: With colleagues across 65+ countries and over 100 different nationalities, our firm’s diversity fuels creativity and helps us come up with the best solutions. Plus, you’ll have the opportunity to learn from exceptional colleagues with diverse backgrounds and experiences.
• Exceptional benefits: On top of a competitive salary (based on your location, experience, and skills), we provide a comprehensive benefits package to enable holistic well-being for you and your family.

Your Impact

As an Ethics & Compliance (E&C) Specialist for Privacy compliance, you will implement specific aspects of the Privacy program, including refining and enforcing policies, procedures, and standards to reduce violations of all applicable Privacy laws and E&C program obligations.

You will primarily work on our McKinsey Client Services specific privacy compliance. Your role involves handling client requests for privacy risk assessments, providing guidance and support to ensure compliance to identify potential privacy risks and develop mitigation strategies. You will maintain and update privacy compliance documentation, implement and monitor privacy by design controls across various projects and initiatives to ensure compliance from the outset.

You will also collaborate with control owners to manage and monitor privacy controls, ensuring they are effective and up to date and you will support the implementation of Privacy program initiatives (e.g., training, communications development, and building guidance documents) to ensure stakeholders within our firm develop a clear understanding of the program. Additionally, you will support other privacy initiatives where necessary.

You will provide regular updates and seek input from Director of Compliance Privacy on milestones, challenges, and decisions.

You will work with Legal to maintain and document up-to-date knowledge of relevant regulatory developments and changes, enforcement actions, innovative technologies and industry trends, tools, and best practices. You will partner with Legal and Risk functions to provide advice to our firm members on new business initiatives, new products/services, business acquisitions, and related matters with respect to the applicability of privacy policies and governance, including the identification and resolution of potential risks and red flags. You will also collect data and conduct research to maintain visibility into external regulatory changes and trends in order to spot potential risk areas for our firm.

As a member of the Regulatory Programs team and E&C function, you will be expected to be a contributor and thought partner within the function, in addition to supporting key organizational, operational, or strategic initiatives, as relevant.

You will be required to engage in regionally focused initiatives, such as infusing our integrity agenda, under the direction and coordination of our regional E&C leaders, the purpose of which is to raise awareness of and further our firm’s E&C program, and other agreed-upon supporting activities in your region or location.

Collaboration is a key aspect of this role. You will collaborate with a cross-functional stakeholder group (e.g., Legal, Risk) across our firm in a timely and efficient manner. You will work closely with our Regulatory and Third-Party Compliance pillar, the broader E&C function, and Legal to drive awareness, training, and monitoring measures for the Privacy program to ensure it is fully embedded in practice and holistic in approach.

Finally, you will play a critical role in sustaining and evolving our firm’s E&C program and upholding our commitment to integrity and lawful practices.

You will be based in one of our Tampa, Phoenix, Atlanta, Austin, Dallas, Denver, or Houston locations as part of our Privacy team.

Your Qualifications and Skills

• Bachelor's degree required, advanced degree(s) and/ or applicable professional certifications (e.g., Juris Doctor, CPA, or PMP) preferred.
• Legal background preferred, with specific knowledge and expertise on privacy requirements and programs.
• Relevant Privacy certifications such as CIPP, CIPM or CIPT are required.
• 5+ years of professional experience in ethics, compliance, risk, legal, and/or governance in a large, multinational organization preferred.
• 3+ years of experience in driving regulatory compliance programs with specific knowledge and expertise on Privacy requirements and programs required.
• Expertise in privacy and data-protection regimes in the EU, US, China, and other jurisdictions, including GDPR, CCPA/CPRA, and PIP.
• Experience and technical expertise regarding compliance related industry tools like OneTrust or AuditBoard.
• Demonstrates an entrepreneurial mindset to progress on ambiguous problems and see them through to resolution.
• Builds trust-based relationships with leaders within and outside of the team; collaborates generously with others and is sought after as a key thought partner.
• Exhibits highest levels of discretion and judgment in safeguarding confidential materials.
• Fosters a collaborative, respectful, and inclusive environment for all colleagues.
• Strong analytical, issue-spotting and problem-solving skills and demonstrated ability to handle complex, sensitive issues.
• Comfort working in a fast-paced, changing environment and able to manage ambiguity with confidence.
• Outstanding English written and oral communication skills, including clear and concise writing and editorial skills and excellent listening skills.

Key skills/competency

• Ethics and Compliance
• Privacy Program Management
• Risk Assessment
• Policy Development
• Regulatory Compliance
• Data Protection Laws (GDPR, CCPA/CPRA)
• Legal Research
• Stakeholder Collaboration
• Problem-Solving
• Communication Skills