The Data Protection Manager is critical in ensuring that the Autohub Group maintains the highest standards of data protection, privacy, and compliance. They collaborate with various stakeholders across the organization, including legal, IT, HR, and business departments, to establish and enforce robust data protection practices and promote a privacy-centric culture.
- Develop, implement, and maintain data protection policies, procedures, and guidelines in accordance with applicable data protection laws such as the General Data Protection Regulation (GDPR) or other local regulations. Ensure the organization's compliance with these laws and keep up-to-date with any changes or updates.
Conduct privacy impact assessments (PIAs) to identify and evaluate the potential privacy risks associated with the collection, processing, and storage of personal data. Recommend and implement appropriate measures to mitigate risks and ensure data protection.- Establish and maintain data governance frameworks, including data classification, retention, and disposal policies. Define roles and responsibilities for data protection and privacy across the organization and ensure the proper handling and management of personal data.
Develop and implement data breach response plans and procedures. Monitor and investigate any data breaches or security incidents, and take appropriate actions to mitigate the impact, notify relevant parties, and ensure compliance with breach notification requirements.
- Provide training and awareness programs on data protection, privacy, and security best practices to employees. Promote a culture of data protection and ensure that employees understand their responsibilities in safeguarding personal information.
Evaluate the data protection practices of clients, vendors, partners, and third-party service providers to ensure they meet the organization's data protection standards. Establish and maintain data protection agreements and contracts with these entities.- Conduct DPIAs for high-risk processing activities, new projects, or significant changes to existing processes. Assess the impact on individuals privacy rights and provide recommendations to mitigate risks and ensure compliance.
Stay up-to-date with changes in data protection laws and regulations. Monitor regulatory developments and provide guidance to the organization on emerging privacy requirements.
- Conduct internal audits and monitoring activities to assess compliance with data protection policies and procedures. Identify areas for improvement, implement corrective actions, and ensure continuous adherence to data protection standards.
Fulfill the role of a Data Protection Officer of Autohub Group. In this capacity, they would act as the main point of contact for data protection matters and liaise with relevant authorities.
Qualifications:
- A graduate of course related to Legal, Management, or IT
At least 5 year(s) of working experience as DPO
- Experience in data protection and privacy role
Cyber Security or Legal background is an advantage but not a must- With certification and strong knowledge and background on Data Privacy Act and/or EU General Data Protection Regulation
Experience in conducting Privacy Impact Assessment or Information Security Assessment
- Very good oral, written, and analytical skills
Familiar with cybersecurity threats and controls
Job Type: Full-time
Schedule:
Flextime
