Consultant - Senior Privacy Analyst

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.

Our client, a large global retailer, is building out a new Records of Processing Activities (ROPA) program to support its Canadian operations, largely from the ground up. In this role, you'll partner directly with the client's privacy engineering team and work across a wide range of business units to document how each line of business handles data, translating existing global ROPA structures into accurate, Canada-specific entries.

If you have hands-on ROPA-building experience, are comfortable owning stakeholder relationships independently, and know how to stay organized across a large, multi-threaded workload, we want to speak with you.

• Build out a Canadian ROPA program largely from the ground up, partnering directly with the client's privacy engineering team.
• Lead discovery and requirements-gathering sessions with business stakeholders across approximately 10-12 business units, documenting each unit's systems, processes, and data handling practices.
• Draft and maintain ROPA entries using established templates, adapting existing global ROPA structures to reflect Canada-specific business processes.
• Proactively track and follow up on outstanding items across 24+ stakeholders, maintaining clear visibility into what's needed, from whom, and by when.
• Communicate directly and professionally with senior business stakeholders, including VP-level contacts, without requiring guidance on tone or approach.
• Participate in daily standups to report progress, plans, and blockers.
• Keep program leadership copied on business-facing communications for visibility, while operating independently day to day.
• Recognize appropriate scope boundaries for each ROPA entry, flagging items that extend beyond the intended process rather than pursuing them further.

• Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
• Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
• Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

• Proven, hands-on experience building or maintaining ROPAs in a North American context (US, Canada, Mexico, or similar); ROPA structure and methodology are largely consistent across these markets.
• Prior experience operating at a senior analyst or engineer level within a privacy or GRC program, someone who has owned and driven ROPA-building work directly, not solely contributed as a business subject matter expert.
• Comfort and professionalism engaging directly with senior stakeholders, including VPs, without requiring coaching on communication style.
• Strong organizational skills and self-driven follow-up habits, able to track outstanding items at a granular, per-entry level across many concurrent stakeholders.
• Familiarity with Quebec Law 25 or similar principle-based privacy regulations (e.g., GDPR) a plus, not required for candidates with strong general North American ROPA experience.
• Comfortable working independently with light day-to-day oversight, while maintaining consistent visibility and communication with leadership.

• Experience standing up a ROPA or privacy program in a new market or region from scratch.
• Background working within large, complex, multi-line-of-business organizations.
• Experience in a consulting or client-facing capacity, comfortable being a trusted outside voice rather than an internal employee.
• Comfort with a defined-duration engagement and the flexibility to scope your own workload independently.

This role can be performed remotely or in-office in Seattle, WA, depending on candidate location. If you would like to request more information, please reach out to talent@kallesgroup.com.

Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.

Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to talent@kallesgroup.com.

Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.