Advisor - Privacy & Data Protection

Primary Responsibilities:

• Oversee the management of data breach incidents to ensure prompt and effective resolution of privacy vulnerabilities identified within current process systems.
• Administer procedures related to responding to personal data access requests submitted by individuals.
• Evaluate outsourcing arrangements involving the processing of personally identifiable information, providing recommendations on privacy controls and ensuring appropriate contractual clauses are incorporated with vendors.
• Coordinate with external Privacy and Data Protection Counsel for expert guidance and conduct audits to verify compliance.
• Identify opportunities for internal initiatives aimed at enhancing Data Privacy practices and policies.

Technical Expertise and Requirements:

• Collaborate with product development teams during the creation of new products, including cloud-based solutions, to embed privacy features and controls aligned with Privacy by Design principles.
• Review and address privacy-related sections within Requests for Information (RFIs), Requests for Quotation (RFQs), and Master Service Agreements (MSAs) from clients, supporting feasibility assessments of privacy clauses during pre-contract negotiations.
• Provide guidance to delivery teams on implementing privacy-related requirements effectively.
• Conduct training sessions and awareness programs for employees to ensure lawful handling of personally identifiable information in their roles.

Additional Responsibilities:

• Develop and oversee Data Privacy and Data Governance processes, ensuring alignment with information security standards and applicable data privacy laws.
• Possess hands-on experience managing Data Privacy issues both as a Data Controller and Data Processor.
• Demonstrate a strong understanding of Delivery Operations to support privacy compliance across projects.
• Exhibit agility and quick learning capabilities to adapt to evolving privacy regulations and organizational needs.
• Maintain excellent business communication skills to effectively articulate privacy requirements and initiatives.

Preferred Qualifications and Skills:

Proficiency in Data Privacy frameworks and certifications such as GDPR, Certified Information Privacy Technologist (CIPT), DSCI Certified Privacy Lead Assessor, CIP, CIPP, DCPLA, or related credentials is highly desirable.