Enterprise focused:
- Lead and collaborate in the formulation of policies related to collection and processing of personally identifiable information, based on the Privacy & Data Protection Laws of the countries in which the company operates or would like to expand its operations.
- Implement and monitor the data privacy policies and associated processes across functions and business units.
- Proactively partner with functional groups (HR, CAG, CCD, Facilities,) to ensure that the adoption of new technologies, processes, services and solutions are compliant with the applicable data privacy regulations
- Assess the development & enhancementsof internal processes & systems and recommend privacy related controls.
- Conduct employee awareness on lawful handling of personally identifiable information, as part of their work.
- Identify risks and also plan and implement the risk mitigation plans
- Lead the data breach handling process for effective addresal of privacy related gaps (if any) reported, in the current process & systems.
- Manage the process related to personal data access requests from individuals.
- Assess subcontracting/outsourcing of any processing of personally identifiable information and recommend privacy related controls (including inclusion of appropriate clauses in the vendor contract.
- Liaison with external Privacy and Data Protection Counsel for expert views and audits.
- Identify and implement internal initiatives on Data Privacy.
Client focused:
- Partner with the product development team in the development of new products (including cloud based) and recommend privacy related features/controls, in summary Privacy by Design.
- Review and respond to privacy related sections in the RFI/RFQ/MSA from clients and collaborate in the feasibility study of privacy related requirements/clauses of the prospect, in the pre-contract sign-off stage.
- Advise the delivery teams regarding implementation of the privacy related requirements.
- Conduct employee awareness on lawful handling of personally identifiable information, as part of their work.
- Assess subcontracting/outsourcing of any processing of personally identifiable information and recommend privacy related controls (including inclusion of appropriate clauses in the vendor contract.
- Conduct internal audits.
- Lead the data breach handling process for effective addresal of privacy related gaps if any, in the current process & systems.
CERTIFICATIONS -
- Excellent understanding of Delivery operations.
- Quick Learner.
- Excellent Business Communication.
- Privacy Certifications such CIPP (US/EU/IT), DCPLA, DCPP
Knowledge, Skills required for the role:
- Data Privacy, Data governance, processes, information security, Data Privacy laws & Standards
- Experience in Data Privacy matters both as a Data controller and Data Processor
- Excellent understanding of Delivery operations.
- Quick Learner.
- Excellent Business Communication
