Assist the Data Protection Officer in the development of data privacy policies and practices, in coordination with the General Counsel, Head of Corporate Legal 1 or other departments (such as CIT, operations, etc.), to ensure that legal/compliance risks associated with Data Privacy are identified, assessed, monitored, mitigated and controlled.
Major Responsibilities:
- Responsible in providing assistance to the General Counsel, Head of Corporate Legal I and the Data Protection Officer on matters involving data privacy.
- Assist the Data Protection Officer in management of the other Business Units of which he is a Common DPO (the Group BUs), including coordination with the Data Privacy Compliance Officer and the POCs of the Group BUs.
- Responsible in assisting the Data Protection Officer on the overall compliance of the Company and Group BUs by way of ensuring that Management, Officers and employees are properly equipped with the knowledge and tools on Data Privacy to safeguard the company from regulatory censure or sanction.
- Responsible in assisting the Data Protection Officer in coordinating with all Data Protection Officers of the conglomerate to ensure alignment on the data privacy activities and share learning and best practices on its Privacy by Design Programs.
- Responsible in assisting the Data Protection Officer er in ensuring the continuous operation of the businesses of the Company and Group BUs by handling regulatory requirements and notices involving data privacy.
- Shadow the Data Protection Officer in all activities and referrals of the Data Privacy Office, including management and supervision of the Data Protection Compliance Officer.
Specific Tasks:
- Conduct continuous gap analysis and risk assessment on the data privacy requirements of regulators and the compliance of the Company/Group BUs including comparison and integration of best practices.
- Assists Corporate Legal I or the Data Protection Officer in providing regular updates to the conglomerate on new and amended data privacy rules and regulations that affect the Company, Group BUs and the conglomerate as a whole. Including coordination with the Data Privacy Compliance Officer.
- Assists the Data Protection Officer in coordinating and liaising with internal stakeholders and various units within the conglomerate, as well as external entities and regulators to ensure compliance with regulatory requirements (i.e., reports, assessments, training, benchmarking, policy reviews, filling-in of gaps, etc.).
- Assists the Data Protection Officer in conducting Privacy Impact Assessments for all data processing systems or projects of the Company and Group BUs.
- Work closely with the Corporate Information Technology group and other relevant departments for the implementation of security measures to further data privacy protection.
- Participate in relevant groups/committees on data breach or security incident management.
- Conducts and organizes the necessary trainings or materials as necessary.
- Assists the Data Protection Officer in handling data privacy issues, matters and/or cases including replying to internal and external stakeholders, and regulators for any data privacy referrals.
- Managing the Data Privacy Portal of the Company to keep the same up to date.
- Performs other duties and responsibilities that may be assigned by the General Counsel, Head of Corporate Legal I or the Data Protection Officer.
Qualification Requirements:
Minimum Education and Experience Requirement:
- Major in a business, IT or relevant course; privacy program management experience
- Data privacy or IT/information security certification/s preferred
Knowledge of Specific Functional Work:
- Knowledgeable in data privacy laws, rules & regulations.
- Working knowledge of foreign data privacy laws (i.e. GDPR)
- Functional understanding of information security (IT) and data protection
Industry / Work Experience Required:
- At least three-five years of experience in data privacy work, project management or other relevant experience.
Special Skills / Behaviors Required:
- Skills: Ability to deal with complexity; ability to maintain composure; analytic assessment skill; communication skills for varying levels of audiences; controlling & monitoring skills; effective enforcing skill; interpersonal skills; multi-tasking; planning and organizational skills; presentation skills; self-sufficiency skill; speed; and time management.
Attitude:
- diplomatic; adaptive, attentive to details; collaborative; committed to the organization; goal-oriented; has concern for order, quality, accuracy; has drive for business process improvement; has initiative; optimistic; resourceful; and tolerates repetition.
