Senior Associate​/Privacy Specialist; Forensic Services practice

Senior Associate/Privacy Specialist (Forensic Services practice)

Boston, MA, United States;
Chicago, IL, United States;
Dallas, Texas, United States;
New York, NY, United States;
Oakland, CA, United States;
Washington, DC, United States

CRA’s Forensic Services practice supports companies’ commitment to integrity by assisting them and their counsel in independently responding to allegations of fraud, waste, abuse, misconduct, and non‑compliance. We are noted for deploying cross‑trained teams of forensic professionals to assist our clients in gaining deeper insights and greater value more quickly. We provide accounting and forensic services as well as cybercrime investigation services.

• Advise clients on the design and implementation of privacy controls, privacy‑by‑design practices, AI use case governance, and data protection strategies.
• Perform privacy and data protection assessments based on industry‑standards and established compliance frameworks (CCPA/CPRA, GDPR, HIPAA, NIST, etc.).
• Translate regulatory requirements into clear technical and operational specifications.
• Support internal and external privacy program builds, including policy design, process automation, and system integration.
• Conduct privacy impact assessments, data flow audits, and risk analysis across digital and technical ecosystems.
• Partner across engineering, legal, and product teams to develop scalable, compliant solutions.
• Assist in the development of reusable templates, internal guidance, and frameworks that improve delivery efficiency.
• Support implementation of industry‑standard privacy and data protection management technologies (e.g., One Trust, Trust Arc, Securiti.ai).
• Participate in client meetings, working sessions, and the drafting of reports, strategy decks, and presentations.

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Law, Public Policy, or a related field.
• 5–7+ years of experience in privacy, data protection, or compliance, ideally within consulting, tech, or legal environments.
• Strong understanding of U.S. privacy regulations and common technical mitigation approaches.
• Demonstrated experience supporting or leading the buildout of privacy programs or technical privacy solutions.
• Familiarity with tools and frameworks such as data inventory systems, consent management platforms, and privacy‑enhancing technologies.
• Ability to communicate complex issues to technical and non‑technical audiences.
• Excellent written and verbal communication skills; experience drafting documentation for legal, product, or engineering stakeholders.
• Collaborative mindset with the ability to work across teams and delegate work to internal and external contributors as needed.
• Demonstrated ability to thrive in fast‑paced environments with a mix of strategic thinking and hands‑on execution.

A good‑faith estimate of the annual base salary range for this position is $130,000 – $152,500. Stating pay within this range may vary based on factors such as education level, experience, skills, geographic location, market conditions, and other qualifications of the successful candidate. This position may be eligible for additional bonus incentive compensation.

CRA offers a comprehensive benefits package, subject to eligibility requirements, which may include: medical, dental, and vision insurance; 401(k) retirement plan with employer match; life and disability insurance; paid time off (vacation, sick leave, holidays); paid parental leave; wellness programs and employee assistance resources; and commuter benefits.

Charles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.