数据隐私官
Data Privacy Officer
这是一个远程职位。
职位描述：
Mastar Limited 正代表一家快速扩展的、以数据驱动的金融科技和医疗科技公司招聘一名数据隐私官（DPO）。该职位在确保全面遵守全球隐私法规（包括 GDPR、英国数据保护法和 HIPAA）方面至关重要，负责制定数据保护策略，并作为监管机构和内部利益相关者的首要联系人。
主要职责：
- 领导公司的数据保护和隐私合规项目。
- 监督并确保符合 GDPR、英国数据保护法案、HIPAA 及其他相关法规。
- 在各部门开展数据保护影响评估（DPIA）和审计。
- 作为数据主体、监管机构和内部团队在隐私相关事务上的主要联系人。
- 向高管层提供关于个人数据使用、数据共享和保留政策的法律风险建议。
- 开发并提供员工数据隐私最佳实践培训。
- 维护数据处理活动记录（RoPA）。
- 与法务、IT 和安全团队合作，降低风险并提升隐私治理水平。
要求
必备技能：
- 精通 GDPR、英国数据保护法、ePrivacy 法规及全球隐私框架。
- 有进行 DPIA、内部审计和管理 DSAR 的经验。
- 具备良好的沟通能力，能够与法律和非法律利益相关者互动。
- 熟悉 ISO 27001、NIST 或类似安全标准。
- 能够起草和审核隐私政策、合同条款和影响评估。
期望技能：
- 持有 CIPP/E、CIPM 或同等认证。
- 在金融科技、医疗健康或生物科技等受监管行业有经验。
- 有法律咨询、合规或数据伦理背景。
- 熟悉数据安全工具和访问管理协议。
福利
职位福利：
- 竞争性薪资及年度绩效奖金
- 私人医疗保险
- 28 天年假 + 公共假期
- 混合/灵活工作模式
- 用于认证的学习与发展预算（例如 CIPP/E、CIPT）
- 接触前沿的隐私和合规项目
最初发布于 Himalayas
查看英文原文
This is a remote position.
Job Description:
Mastar Limited is hiring a Data Privacy Officer (DPO) on behalf of a fast-scaling, data-driven organization in the FinTech and Healthcare Technology space. This role is critical in ensuring full compliance with global privacy laws (including GDPR, UK DPA, and HIPAA), leading data protection strategies, and acting as the key point of contact for regulatory authorities and internal stakeholders.
Key Responsibilities:
- Lead the company’s data protection and privacy compliance programs.
- Monitor and ensure compliance with GDPR, UK Data Protection Act, HIPAA, and other relevant regulations.
- Conduct Data Protection Impact Assessments (DPIAs) and audits across departments.
- Serve as the primary contact for data subjects, supervisory authorities, and internal teams on privacy-related matters.
- Advise executive leadership on legal risks related to personal data use, data sharing, and retention policies.
- Develop and deliver employee training on data privacy best practices.
- Maintain records of data processing activities (RoPA).
- Collaborate with legal, IT, and security teams to mitigate risk and improve privacy governance.
Requirements
Required Skills:
- In-depth knowledge of GDPR, UK DPA, ePrivacy Regulation, and global privacy frameworks.
- Experience in conducting DPIAs, internal audits, and managing DSARs.
- Strong communication skills with the ability to engage legal and non-legal stakeholders.
- Familiarity with ISO 27001, NIST, or similar security standards.
- Ability to draft and review privacy policies, contractual clauses, and impact assessments.
Desired Skills:
- Certifications such as CIPP/E, CIPM, or equivalent.
- Experience in regulated sectors like FinTech, Healthcare, or Biotechnology.
- Background in legal advisory, compliance, or data ethics.
- Working knowledge of data security tools and access management protocols.
Benefits
Job Benefits:
- Competitive salary & annual performance bonus
- Private medical insurance
- 28 days holiday + public holidays
- Hybrid/flexible work model
- Learning & development budget for certifications (e.g., CIPP/E, CIPT)
- Exposure to cutting-edge privacy and compliance initiatives
Originally posted on Himalayas