What are the responsibilities and job description for the Information Privacy Professional position at PrivacyCT Consulting?
Company Description
PrivacyCT Consulting is a Windsor, Connecticut–based firm that provides plain-language privacy and data security compliance services for small and mid-size businesses. The company helps Connecticut organizations understand and comply with the Connecticut Data Privacy Act and related regulations before enforcement issues arise. PrivacyCT works with financial services companies, healthcare-adjacent practices, retailers, nonprofits, and professional services firms that manage real customer data but lack internal compliance teams.
Services include CTDPA audits and gap analyses, privacy policies and notices, cookie consent and GPC opt-out setups, FTC Safeguards Rule documentation, consumer rights workflows, data protection impact assessments, employee training, and ongoing retainers. PrivacyCT Consulting is a subsidiary of Hosting Connecticut LLC and operates as compliance implementation specialists, not as a law firm.
We’re looking for a smart, motivated privacy professional to work alongside us on client engagements — someone who wants to build something meaningful in a growing field, with flexible hours and real ownership of their work. This is a 1099 contractor relationship to start, with the expectation that it will grow.
Role Description The Information Privacy Professional will support clients in assessing, documenting, and implementing data privacy and security compliance programs under Connecticut and U.S. privacy laws. In this part time contractor role based in Windsor, CT, the professional will conduct privacy risk assessments and CTDPA gap analyses, review data flows, and translate regulatory requirements into practical, business-friendly processes.
Day-to-day responsibilities include drafting and updating privacy policies, notices, cookie consent language, and internal procedures; mapping personal data; and assisting clients with consumer rights workflows and data protection impact assessments. The role will also involve preparing compliance documentation for FTC Safeguards Rule and similar frameworks, coordinating employee privacy and security training, and maintaining clear communication with clients through meetings, status reports, and implementation guidance. Collaboration with the Hosting Connecticut team to refine tools, templates, and best practices is expected.
Qualifications
- Strong analytical skills to interpret privacy regulations, assess risk, and perform audits and gap analyses.
- Excellent communication skills, including the ability to explain complex privacy concepts in clear, plain language to non-technical stakeholders.
- Knowledge of information management practices, including data mapping, records retention, and handling of personal data across systems and processes.
- Understanding of information technology environments, including web applications, databases, and digital services relevant to privacy implementation.
- Foundational cybersecurity awareness, including access control, encryption basics, incident response concepts, and secure handling of customer data.
- Familiarity with U.S. privacy laws and standards (e.g., CTDPA, FTC Safeguards Rule; experience with CCPA/CPRA or HIPAA is a plus).
- Relevant certification or coursework (e.g., CIPP/US or other privacy, security, or compliance credentials) is highly beneficial.
- Bachelor’s degree in a related field (such as information systems, law/legal studies, business,