Introduction

At Slipstream IT we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach. Our solutions are designed exclusively for emerging pharma and biotech organizations. Slipstream’s industry-leading solutions free clients from the demands of internal IT and allow them to rapidly advance their mission. Led by a leadership team that has been together for over 10 years, you will join a proven team, culture, and strategy to drive innovation within the IT outsourcing industry while developing your skillset with opportunities for internal growth.

Role Summary

The OneTrust Privacy & Compliance Specialist is responsible for the administration, configuration, and ongoing optimization of the OneTrust platform across client engagements, supporting privacy, data governance, and compliance programs for emerging pharma and biotech organizations. This is a hands-on delivery role: the Specialist personally executes platform configuration, assessment build-out, workflow design, and integration support on client engagements while serving as an internal subject matter expert on OneTrust. The role partners closely with Legal, IT, Security, Compliance, and business stakeholders to ensure platform configuration aligns with regulatory requirements and translates privacy obligations into scalable, auditable platform solutions. Limited travel 10% or less. Fully remote.

Core Responsibilities

• Administer, configure, and optimize the OneTrust platform on client engagements across modules including Privacy Management, Consent & Preferences, Third-Party Risk, Data Discovery, and GRC, depending on client need
• Build and maintain assessments, workflows, data inventories, and Records of Processing Activities (ROPAs) within OneTrust, applying consistent design patterns across engagements
• Support Data Protection Impact Assessments (DPIAs), Transfer Impact Assessments (TIAs), and Legitimate Interest Assessments (LIAs) through platform configuration and stakeholder coordination
• Manage cookie consent banners, preference centers, and consent lifecycle workflows across client digital properties, ensuring alignment with applicable jurisdictional requirements
• Configure and operate Data Subject Access Request (DSAR) intake, fulfillment, and reporting workflows, partnering with client privacy and legal teams on response coordination
• Translate privacy, legal, and regulatory requirements into platform configuration, workflows, assessment templates, and reporting that are testable, traceable, and audit-ready
• Onboard new client business units and users onto the platform, including role-based access design, training delivery, and operational documentation
• Partner with Solution Architects, BAs, QA, and client stakeholders to align OneTrust configuration with broader compliance, security, and IT landscape decisions
• Support integrations between OneTrust and adjacent enterprise systems including Salesforce, Veeva, identity providers, ticketing systems, and data discovery tools
• Apply life sciences privacy context to platform scope decisions, including HCP and patient engagement, clinical and research data considerations, sample management, MLR/PRC review, field tools, and consent and privacy obligations across commercial, medical, and clinical remits
• Support audit readiness and regulatory inquiry response, including evidence collection, traceability, change history, and platform documentation
• Monitor and apply OneTrust platform updates, new modules, and roadmap changes, advising clients on adoption and impact
• Establish and contribute to Slipstream’s OneTrust delivery assets, including reusable configuration patterns, assessment templates, workflow libraries, and implementation playbooks
• Generate dashboards, reports, and quality metrics for client compliance tracking and Slipstream leadership visibility, including DSAR cycle time, assessment completion, consent performance, and third-party risk posture
• Support presales and SOW development for OneTrust scope, including effort estimation, configuration level-of-effort, and articulation of Slipstream’s OneTrust capabilities to prospective clients
• Mentor junior analysts and contribute to peer reviews of platform configuration, assessment design, and client deliverables

Required Qualifications

• 2–4 years of experience in privacy, compliance, data governance, or a related field within a consulting, systems integrator, or in-house environment
• Required pharma, biotech, healthcare, or life sciences industry experience
• Hands-on experience administering or configuring the OneTrust platform across one or more modules (Privacy Management, Consent & Preferences, Third-Party Risk, GRC, or Data Discovery)
• Working knowledge of global privacy regulations including GDPR, CCPA/CPRA, and other US state privacy laws, with awareness of HIPAA and emerging international frameworks
• Experience configuring assessments, workflows, data inventories, and DSAR processes within OneTrust or a comparable privacy management platform
• Experience supporting cookie consent and preference management implementations across digital properties
• Strong ability to translate privacy, legal, and regulatory requirements into platform configuration and operational workflows
• Experience working in client-facing or cross-functional delivery environments, including coordination across Legal, IT, Security, and business stakeholders
• Strong analytical, problem-solving, and documentation skills, with the ability to communicate technical concepts to non-technical stakeholders
• Excellent written and verbal communication skills, including the ability to lead working sessions, present platform configuration approach, and represent Slipstream in client forums
• OneTrust certifications (Privacy Management Professional, Consent & Preferences, Third-Party Risk, GRC, or Data Discovery)

Nice to Have

• IAPP certifications (CIPP/E, CIPP/US, CIPM, or CIPT)
• Experience supporting GxP environments or working knowledge of GAMP 5 risk-based principles and 21 CFR Part 11
• Experience with adjacent platforms such as Salesforce, Veeva, ServiceNow GRC, SAP, or Workday
• Experience with API-based integrations, SSO/identity providers, and middleware platforms
• Experience with data discovery, classification, or DLP tooling
• Experience supporting audit response, regulatory inquiries, or external assessments in a regulated environment
• Experience working with offshore or distributed delivery teams

Benefits

• 401k match
• Comprehensive group health, dental, vision benefits
• Life insurance/LTD
• Discretionary PTO

Slipstream IT is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation or identity, national origin, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. Slipstream IT makes hiring decisions based solely on qualifications, merit, and business needs at the time.

This job description may not be inclusive of all assigned duties, responsibilities, or aspects of the job described, and may be amended at any time at the sole discretion of the Employer.