AVP/ Manager - Data Protection

Job Description:

Position: AVP - Data Protection

Experience:  >10 years

Department: Risk Management & Fraud Monitoring

Reports to: Data Protection Officer

Overview:

We are seeking a highly motivated and detail-oriented Data Protection professional to join our team. As the AVP – Data Protection you will play a crucial role in ensuring the company's compliance with data protection laws and regulations, implementing privacy policies and procedures, and supporting various data privacy implementations and initiatives. You will collaborate with cross-functional teams to safeguard the privacy of our customers' and employees' data.

Responsibilities:

1. Compliance and Regulatory Support:
2. Stay up-to-date with relevant data protection laws, regulations, and industry best practices.
3. Assist in interpreting data privacy regulations and assess their impact on the organization.
4. Collaborate with legal, compliance, and risk management teams to ensure data privacy compliance across all business processes.

2. Privacy Program Development:
3. Assist in developing and implementing data privacy policies, procedures, and guidelines in alignment with applicable laws and regulations.
4. Propel the Data Governance posture through external assessments & standards certification like ISO 27701 (PIMS).

3. Data Privacy Impact Assessment (DPIA):
4. Conduct Data Privacy Impact Assessments for new and existing projects, systems, and processes.
5. Collaborate with project teams to identify and mitigate potential privacy risks in data processing activities.

4. Incident Response and Breach Management
5. Support the development and maintenance of an incident response plan for handling data privacy breaches and incidents.
6. Assist in investigating and documenting data privacy incidents, ensuring timely reporting to relevant authorities when required.

5. Vendor Management
6. Evaluate and assess the data privacy practices of third-party vendors and service providers.
7. Work with internal teams to ensure data privacy clauses are included in vendor contracts.

6. Privacy Awareness and Advocacy:
7. Promote a culture of privacy awareness and data protection compliance throughout the organization.
8. Act as a point of contact for privacy-related inquiries and provide guidance to employees on data protection matters.
9. Contribute to the development and execution of data privacy training programs for employees and stakeholders.

7. Consent Management and Data Principal Rights:
8. Support on policies and implementation of Consent management platform.
9. Handle data principal access requests (DPARs) and other data privacy-related inquiries from individuals.
10. Coordinate with internal teams to respond to DPARs within the required timelines.