Background – Mariah is a Privacy Manager at LevelUP Consulting Partners. Her experience includes audit preparation, compliance, privacy program management, Third-Party Risk Management, data mapping, data subject rights request management, and best practices in a variety of other privacy domains. Before joining LevelUP, Mariah spent time both in-house and as a consultant focusing on the areas of data privacy, information governance, and cybersecurity. She conducted entity-wide, risk-based assessments, including for CCPA, GDPR, COPPA, LGPD, and other regulatory schemes. She has experience drafting, reviewing, and implementing client deliverables including gap assessments, privacy policies and notices, privacy training, data inventories, third party risk assessments, data subject rights request programs, data processing addenda, internal SOPs, cookie banners, third party contracts, executive presentations, research memos, and more.   

Experience, Skills, and Expertise – Mariah has experience working with focused startup teams as well as large, multinational corporations in a wide range of industries including retail, hospitality, and technology. She has worked closely with these organizations to develop and execute privacy programs, prepare for FTC and MRC audits, conduct and operationalize risk assessments, and draft essential privacy documentation such as privacy notices. She has collaborated with stakeholders from all organization levels, including C-suite executives. She has experience training organization stakeholders in a variety of privacy program processes, such as DSR management, data inventory, and Third-Party Risk Management.  

Certifications and Education – Mariah holds a bachelor’s degree in history from Davidson College and a Juris Doctorate from the University of North Carolina School of Law. She is a Certified Information Privacy Professional (CIPP/US).  

OneTrust Certifications – Mariah is a OneTrust Certified Privacy Management Professional. She also has the following OneTrust Expert Certifications: Privacy Rights Automation, PIA & DPIA Automation, Third-Party Risk Management, and Data Mapping Automation.