Manager, Data Privacy

Responsibilities

• Support the Data Protection Officer (DPO) in developing, implementing and maintaining effective internal data privacy policies and procedures in alignment with data protection requirements.
• Monitor regulatory development in data protection and cybersecurity and disseminate this information to the stakeholders and assess their impact on business operations.
• Conduct privacy impact assessment and support risk mitigation strategies, including identifying key data privacy risks / weaknesses and recommending ways to enhance procedures to improve operational efficiency.
• Develop privacy compliance strategies in line with data protection and cybersecurity law and regulations to mitigate the Corporation’s exposure to privacy risk.
• Collaborate with stakeholders in reviewing existing internal controls and processes related to data privacy to ensure that any identified gaps are being addressed.
• Review and assess third party relationships that pose higher risk for data privacy.
• Assist DPO in responding to data subject requests and regulatory inquiries.
• Coordinate / conduct investigation and assessment on personal data breach incidents for reporting to the relevant authorities.
• Work closely with stakeholders to ensure appropriate technical and organizational measures for data protection.
• Develop and implement appropriate data privacy training for employees, senior management and directors of the Corporation.
• Assist DPO in providing guidance and attending queries on data privacy matters by providing advisory for informed decision making.
• Support the privacy champions in each division in their execution of data privacy strategies.
• Assist DPO in preparing data privacy reports and updates to relevant management committees and board committees.
• Perform miscellaneous job-related duties as assigned by the Head, Compliance & Integrity from time to time.

Job Requirements

Note : This description retains the core job responsibilities and requirements and removes extraneous boilerplate content not directly related to the role.

#J-18808-Ljbffr