数据保护与技术高级专员
Data Protection & Technology Senior Associate
工作描述：·作为数据保护团队成员，本职位将支持数据保护和技术服务部门确保我们遵守法规及法律的数据保护和隐私要求，支持全球各行业以及公司及其公司的所有功能领域。· 管理和响应隐私邮箱中收到的询问，并根据需要提供咨询，指导或升级。· 对第三方登录相关的监管和隐私风险和做法进行隐私供应商评估。· 与业务部门联系以确定隐私风險领域，确定适当的隐私控制来限制新项目，云托管倡议和/或特殊项目的隐私风害。· 根据需要起草和/或维护我们的隐私政策，程序和指南。协助其他业务部门制定可能对个人影响的隐私政策 （例如员工手册，技术使用，社交媒体政策等）. ·协助审查适用法律法规的变化，并解释对公司及其企业的影响。·帮助开展年度隐私培训和持续意识计划。·协助处理数据主体访问请求程序。·协助每年评估监控政策以防止个人数据丢失/数据泄露预防监测。·将风险与控制过程调整成日常责任来监督和减轻风险；适当升级。·保持不断发展的技术 （例如人工智能）和相关风险和影响数据保护的最新信息。·协助调查数据泄露，管理报告和影响数据隐私和/或客户机密性的趋势分析。·根据需要支持其他日常项目元素。**注：该职位的主要责任不仅限于上述细节。**资格：· 具有6年的相关经验；· 学士学位优先或同等经验。· 有关行业认证 （例如 CIPM,CIPP EU/A/C/US,CISSP 等）. · 有关经验包括 （如数据隐私，审计，信息类）
查看英文原文
JOB DESCRIPTION:
· Being a member of the Data Protection team, this position will support the efforts of Data Protection and Technology Services to ensure our adherence to regulatory and legal data protection and privacy requirements, supporting all lines of businesses and across all functional areas of our company and its companies globally.
RESPONSIBILITIES:
- Keep abreast of and maintain a current understanding of global data privacy laws and regulatory requirements that apply to our company and its companies.
- Conduct annual privacy inventory of data and processing activities, performing PIA and DPIAs.
- Manage and respond to inquiries received in the privacy mailbox and provide consultation, guidance, or escalate as needed.
- Perform privacy vendor evaluations to assess regulatory and privacy risks and practices associated with the onboarding of third parties.
- Liaise with business lines to identify privacy risk areas and determine appropriate privacy controls to limit privacy risks to new projects, cloud hosing initiatives and/or special projects.
- Draft and/or maintain our privacy policies, procedures and guidelines as needed. Assist other business lines with policies that may have an impact to individuals privacy (e.g., employee handbook, technology usage, social media policy, etc.)
- Assist in the review of changes to applicable laws and regulations and interpretation of impact to the company and its companies.
- Assist with annual privacy training and ongoing awareness program.
- Assist with procedures to address Data Subject Access Requests
- Assist with the annual review of monitoring policies to prevent the loss of personal data/data leakage prevention monitoring.
- Aligns risk and control processes into day-to-day responsibilities to monitor and mitigate risk; escalate appropriately.
- Keep current on evolving technologies (e.g., AI) and the associated risks and impact to data protection.
- Assist with data breach investigations, management reporting, and trend analysis impacting data privacy and/or client confidentiality.
- Support other daily program elements as needed.
**NOTE: The Primary Responsibilities of this role are not limited to the details above. **
QUALIFICATIONS:
- Minimum of 6 years of related experience
- Bachelor's degree preferred or equivalent experience.
- Relevant industry certification (e.g., CIPM, CIPP EU/A/C/US, CISSP, etc.
- Relevant experience to include (e.g, data privacy, audit, information security, risk management, etc.)
Must Have
- Minimum of 6 years of related experience
- Bachelor's degree preferred or equivalent experience.
- Relevant industry certification (e.g., CIPM, CIPP EU/A/C/US, CISSP, etc.
- Relevant experience to include (e.g, data privacy, audit, information security, risk management, etc.)
Originally posted on Himalayas