Personal Data Protection, Senior Specialist

About the company

Role overview

Responsibilities

• Support implementation and continuous improvement of the personal data protection and privacy framework.
• Monitor and support compliance with applicable laws, regulations, policies, and standards.
• Develop, review, and maintain data protection policies, procedures, guidelines, and controls.
• Identify, assess, and help mitigate personal data protection and privacy risks.
• Collaborate with Information Security, Risk, Legal, IT, Data Management, and business teams.
• Support classification, handling, storage, retention, and secure processing of personal data.
• Assess data processing activities and identify privacy and data protection requirements.
• Support privacy and data protection assessments, audits, and compliance reviews.
• Monitor and report on compliance, risks, and control effectiveness.
• Guide stakeholders on data protection requirements and best practices, and support awareness and training initiatives.
• Keep up to date with changes in laws, regulations, standards, and industry practices.
• Contribute to improving data protection processes, controls, and governance.

Qualifications and experience

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Law, or another related field.
• 5+ years of relevant professional experience in data access, data protection, privacy, information security, data governance, risk, compliance, or a related field.
• Experience working with data protection policies, frameworks, controls, and compliance requirements.
• Experience in personal data protection, privacy, risk management, or information security is highly preferred.

Knowledge and skills

• Good knowledge of personal data protection laws, regulations, policies, and compliance requirements.
• Strong understanding of data protection and information security principles.
• Knowledge of data classification, data privacy, data handling, and information protection practices.
• Understanding of privacy and data protection risks and related controls.
• Ability to translate regulatory requirements into practical policies, processes, and controls.
• Strong analytical, problem-solving, communication, and stakeholder management skills; able to work effectively with cross-functional teams.

Preferred certifications

• Certified Information Privacy Manager (CIPM) is preferred.
• Certified Information Privacy Technologist (CIPT) is preferred.