Personal Data Protection, Senior Specialist

Key Responsibilities

• Support the implementation and continuous improvement of the organization's personal data protection and privacy framework.
• Monitor and support compliance with applicable personal data protection laws, regulations, policies, and standards.
• Develop, review, and maintain personal data protection policies, procedures, guidelines, and controls.
• Support the identification, assessment, and mitigation of personal data protection and privacy risks.
• Collaborate with Information Security, Risk, Legal, IT, Data Management, and business teams on data protection initiatives.
• Support the classification, handling, storage, retention, and secure processing of personal data.
• Assist in assessing data processing activities and identifying privacy and data protection requirements.
• Support privacy and data protection assessments, audits, and compliance reviews.
• Monitor and report on personal data protection compliance, risks, and control effectiveness.
• Provide guidance to relevant stakeholders on personal data protection requirements and best practices.
• Support awareness and training initiatives related to personal data protection and privacy.
• Keep up to date with changes in personal data protection laws, regulations, standards, and industry practices.
• Contribute to the continuous improvement of personal data protection processes, controls, and governance practices.

Education

Experience

Knowledge & Skills

Preferred Certifications

Qualifications

• Education
• Bachelor's degree in information technology, Computer Science, Cybersecurity, Law, or another related field.
• 5+ years of relevant professional experience in data access, data protection, privacy, information security, data governance, risk, compliance, or a related field.
• Experience in personal data protection, privacy, risk management, or information security is highly preferred.
• Experience working with data protection policies, frameworks, controls, and compliance requirements.
• Knowledge & Skills
• Good knowledge of Personal Data Protection laws, regulations, policies, and compliance requirements.
• Strong understanding of data protection and information security principles.
• Knowledge of data classification, data privacy, data handling, and information protection practices.
• Understanding of privacy and data protection risks and related controls.
• Ability to interpret regulatory requirements and translate them into practical policies, processes, and controls.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to work effectively with cross-functional teams, including Legal, Risk, Information Security, IT, and business functions.
• Preferred Certifications
• Certified Information Privacy Manager (CIPM)
• Certified Information Privacy Technologist (CIPT)
• Job Location: Client Site