Perform the tasks identified and assigned by the Data Protection Officer, to drive, monitor and support the privacy program.
Assist in drafting and establishing the Privacy policies and procedures within the organization.
Record and track any data privacy-related investigations conducted by the DPO or external party, as the case may be.
Assist in developing privacy training material for employees & contract staff and track the compliance.
Document, track, investigate all data subject requests, complaints, breaches, potential breaches concerning the organization’s privacy and report the same to DPO. Assist DPO in compliance monitoring activities.
Initiate, facilitate and promote activities to foster information privacy awareness within the organization and related entities.
Assist internal teams in performing the privacy impact assessments.
Provide support to the internal teams in preparing & maintaining relevant documentation with respect to data privacy such as Notice & Consent, Privacy Impact Assessments; Data flow diagrams, Inventory of personal data, etc.
Assist in performing periodic data privacy audits for the internal teams, under the direction of the DPO.
Stay up-to-date with the current knowledge of geography-specific applicable privacy laws.
Qualification & Experience
Master's degree or equivalent in Information Security, Law etc.
Professional certification, e.g. CDPSE, DCPP, DCPLA, CIPP, CIPT, CIPM, CISA, ISO27001, ISO27701 etc.
5+ years’ of relevant privacy experience, including working in an IT/ITES firm.
Strong understanding and experience in analyzing international privacy laws such as General Data Protection Regulation (“GDPR”), UK GDPR, California Privacy Rights Act (“CPRA”), Personal Information Protection and Electronic Documents Act (PIPEDA), Personal Data Protection Act, EU/UK International Data Transfer, etc.