Description

Lead enterprise data privacy and personal data protection programs by developing privacy frameworks, policies, compliance controls, privacy risk assessments, and regulatory implementation aligned with applicable privacy laws and international standards.

Key Responsibilities

• Develop enterprise data privacy framework.
• Create privacy policies and procedures.
• Conduct privacy impact assessments (PIA).
• Perform data protection impact assessments (DPIA).
• Design privacy by design controls.
• Define personal data classification standards.
• Develop consent management processes.
• Establish data subject rights procedures.
• Implement data retention and deletion policies.
• Support data breach management processes.
• Conduct privacy risk assessments.
• Map personal data processing activities.
• Ensure compliance with applicable privacy regulations.
• Deliver awareness sessions and stakeholder workshops.
• Support privacy audits and assessments.

Requirements

Technical Skills

• Personal data protection regulations
• Privacy risk assessment
• DPIA / PIA
• Privacy by design
• Data classification
• Data masking
• Data anonymization
• Data encryption fundamentals
• Identity & access management concepts
• Records management
• Information security fundamentals
• Privacy compliance tools

Experience

• 7 to 10 years in data privacy, information security, governance, risk & compliance, or related fields.
• Experience implementing enterprise privacy programs.
• Experience with regulatory compliance projects.

Preferred Certifications

• CIPP/E
• CIPP/A
• CIPM
• CIPT
• ISO 27701 Lead Implementer
• ISO 27001 Lead Implementer