OneTrust Data Governance & Security Specialist

Seeking Experienced OneTrust Security and Governance Specialists for Exciting Projects Remote in Mexico City

We are looking for an experienced OneTrust Security and Governance Specialist with a minimum of 7 years of experience to join a dynamic team within a leading organization. This role involves implementing and operating the OneTrust platform as the policy and evidence layer of an enterprise data governance program, with a focus on data discovery, privacy, compliance, security, and governance.

Key Responsibilities:

Implement and configure OneTrust modules according to privacy and compliance programs.

Onboard data sources, define scan scope and cadence, and tune data classification.

Build and maintain data maps and Records of Processing Activities (RoPA).

Configure data policies, monitor violations, and drive remediation to closure.

Coordinate the application of data controls such as masking, filtering, encryption, and access restrictions.

Configure and operate assessment, DSAR, incident, consent, and privacy workflows.

Implement control frameworks and evidence collection for audits and certifications.

Design and maintain integrations with the surrounding ecosystem, particularly Informatica.

Translate regulatory and policy requirements into OneTrust platform configurations.

Provide L2 and L3 support, troubleshooting scan, integration, workflow, and permission issues.

Technical Skills Required:

With over 7 years of experience as a OneTrust Security and Governance Specialist, you must be proficient in the following technical skills:

OneTrust, Data Discovery, and Data Governance.

OneTrust Data Use Governance and Control Enforcement.

Privacy Automation, RoPA, PIA, DPIA, TIA, DSAR, Incident and Breach Management, and Consent Management.

Risk & Compliance frameworks including ISO 27001, ISO 27701, SOC 2, and NIST CSF.

OneTrust REST APIs and webhooks for automation and integrations.

Experience integrating OneTrust with Informatica catalogs.

Knowledge of AWS data environments including S3, Redshift, RDS, and Oracle.

Knowledge of Denodo and data virtualization layers.

Experience with ITSM and collaboration tools such as ServiceNow, Jira, Slack, or Teams.

Working knowledge of GDPR, CCPA, CPRA, LGPD, privacy by design, and data minimization.

Knowledge of data protection techniques including classification, masking, tokenization, encryption, RBAC, and ABAC.