Data Protection Officer

We are seeking a dedicated Data Protection Officer (DPO) to ensure the organization’s compliance with data protection laws and regulations. This role involves continuously monitoring changes in privacy legislation and updating policies accordingly. The successful candidate will play a key role in developing and implementing the Data Privacy strategy, aligning it with the broader Information Security framework. They will conduct privacy impact assessments, manage data subject access requests, and provide training to promote privacy awareness across the organization. Collaboration with various departments and third-party vendors is essential to maintain a comprehensive and compliant data protection environment.

Key Responsibilities

- Guarantee organizational adherence to relevant data protection laws and regulations, ensuring all practices meet legal standards.
- Monitor changes in privacy laws and promptly update policies and procedures to reflect the evolving legal landscape.
- Prepare and regularly review Data Privacy policies and procedures to maintain compliance with legal, regulatory, and organizational requirements.
- Assist in developing and implementing the Data Privacy strategy, integrating it into the overall Information Security strategy.
- Conduct privacy impact assessments for new projects, processes, or technologies involving personal data.
- Identify and document types of personal data processed, establish processing purposes, classify data based on sensitivity, and implement appropriate protection measures.
- Manage and respond to data subject access requests and inquiries related to privacy concerns.
- Provide training to employees on data protection practices and foster a culture of privacy awareness within the organization.
- Collaborate with other departments to ensure a holistic approach to data protection and compliance.
- Support reporting authorities in implementing procedural control measures identified through audits, risk assessments, and compliance reviews.
- Serve as the primary point of contact for data protection, ensuring data management policies align with security and compliance requirements.
- Oversee the development, implementation, and enforcement of information and data classification policies, ensuring comprehensive coverage in SOP and baseline documents.
- Perform internal privacy audits and assessments to identify gaps and recommend corrective actions.
- Work with Procurement and Third-Party Risk Management teams to assess, evaluate, and monitor third-party vendors handling personal data, ensuring compliance with privacy and data protection standards.
- Undertake any other related duties assigned by the Head of Information Security.

Required Qualifications

- Strong knowledge and understanding of common data protection management frameworks and best practices.
- Ability to assess privacy impact, classify data, and establish protective measures based on data sensitivity.
- Comprehensive understanding of Data Privacy strategy and its alignment with broader Information Security goals.
- Excellent analytical, communication, collaboration, problem-solving, documentation, and leadership skills to effectively convey complex data protection concepts to diverse audiences.
- Bachelor’s degree in a technology, engineering, or information security-related field.
- Minimum of 6 to 7 years of hands-on experience in data and information security within a large enterprise environment.

Preferred Qualifications and Benefits

- Competitive salary package.
- Fuel card provided.
- Health benefits included.
- Opportunities for professional development and career growth.
- Inclusive work culture that values diversity and fosters collaboration.

This role offers an excellent opportunity for a seasoned professional to lead data protection efforts in a dynamic and supportive environment.