Principal Duties and Responsibilities
- Established governance, oversight and accountability for Data Protection.
- Ensure proper oversight on development and implementation of Privacy Framework, Policy and Standard.
- Ensures development of core Data protection program components such as processes, tools, templates, guidance and privacy notices for the lines of business to use in building controls.
- Established protection risk assessment requirements and performs second line risk based monitoring and enforcement of protection and privacy controls to ensure compliance.
- Ensure efficient execution of Protection program and coordination with business units and project teams to implement applicable protection requirements.
- Ensure development and implementation of competency based training and awareness for protection related policies and standards.
- Ensure delivery and maintenance of best in class Data protection capabilities e.g. Consent, Data governance & Protection, Data protection Principles and Data Breach Notification, etc... with the support of data office in the regulatory body.
- Ensures compliance with applicable regulatory requirements related to Data Protection.
- Reviews personal data inventory and Data Protection Impact Assessment (DPIA) results across the organization.
- Ensures development and maintenance of DPIA methodology and qualifiers.
- Works with legal to ensure the organization maintains appropriate protection and confidentiality consents and authorization forms, information notices and material reflecting current organization and legal practice requirements.
- Ensure to Identify and address requirements and challenges related to data management and personal data protection.
- Reports performance of the Protection program to the management and relevant committees.
- Manages communications with supervisory authorities/regulators on data protection related matters.
- Ensures continues assessment of the current state of Protection maturity, development and implementation of roadmap to achieve the target state.
- Ensures alignment of Data Protection capabilities/initiatives with department and/or Corporate Strategy.
Key Accountabilities
- Direct and control departmental projects to ensure project cycle completion and commitment to the company's guidelines and quality.
- Ensure effective utilization of the department's allocated budget, and report accurately on progress and challenges manage all the department staff to ensure that they are appropriately motivated and trained and carry out their responsibilities to the required standards.
- Set performance objectives, provide the necessary support, evaluate team(s), and offer regular feedback on performance.
- Provide clear top-down communication to employees and down-top feedback to the Executive Team.
- Direct and control the department's staff to ensure that they are appropriately motivated and trained and carry out their responsibilities to the required standards.
- Comply with communication and information sharing/handling policy to ensure confidentiality of the information and comply with all relevant risk and information security procedures to ensure operating within the acceptable risk levels.
- Direct the development and implementation of the department's policies, procedures, and processes covering all areas of the department's activities to ensure the fulfillment of all work requirements.
- Ensure compliance with all relevant policies, procedures, and processes throughout the department in order to achieve the company's operational excellence.
Job Requirements
Education and Certifications
- Bachelor degree in Computer Science or IT engineering or equivalent preferably at post graduate level and relevant work experience
Knowledge and Experience
- 8 + years of experience in related field
Skills Required
- CISSP, ISO 27001 Lead implementer, CRISC, CISA, CISM, PMP, Certified Information Privacy Professional/Europe, Certified Information Privacy Manager (CIPM), Fellow of information Privacy (FIP).
- Industry recognized privacy or data governance related certification.
- Advanced English.