Analyst, Europe and Asia-Pacific Privacy Office

This role reports to the EAP PO Privacy Manager and supports various activities within Privacy. Key accountabilities include:

• Perform reviews of Privacy Impact Assessments, Legitimate Interest Assessments, Transfer Impact Assessments, Third Party Control Assessments and work with businesses to review and challenge control and mitigation measures.
• Manage data privacy breaches and incidents and assist with data subject rights requests.
• Manage annual review of Records of Processing Activities and the associated Annual Attestation process, including for purposes of Article 30 of the GDPR.
• Maintain privacy issues log and other tracking and record-keeping documentation for the EAP Region.
• Maintain privacy-related risk assessments, metrics and reporting mechanisms to assess the health of the privacy program.
• Remain current on applicable legislation and regulation across the region.
• Support regulatory change activities.
• Assist in maintaining internal privacy policies and notices.
• Support training and awareness program to promote compliance.
• Conduct and/or participate in regional monitoring and testing activities as required.
• Escalate issues as appropriate.
• Support special projects and strategic initiatives as assigned.
• Provide objective guidance, support and advice to promote strong privacy controls and processes.
• Assist with privacy-related activities associated with corporate transactions such as integration, mergers and acquisition activities, including planning, due diligence, privacy impact assessments, policy and procedure reviews and creation.
• Participate fully as a member of the EAP Privacy team and Global Privacy Compliance team through collaboration, sharing of privacy knowledge and expertise and identify ways to innovate our processes.
• Maintain personal/professional development to meet the changing demands of the role, including all relevant regulatory and legislative training.

Skills / Experience:

• Experience in one or more of the following disciplines would be beneficial: Privacy and Data Protection, Compliance, Legal, Risk Management, Internal Audit, Information Technology.
• Ability to independently manage timelines and deliverables and provide subject matter expertise to business partners and projects.
• Excellent communication skills, both oral and in writing, with the ability to work across different jurisdictions and with stakeholders across different areas.
• Analytical and enquiring nature, ability to identify potential risks, ability to solve problems, attention to details.
• Ability to build business relationships with a capacity to influence and convince.
• Proficient in Microsoft Office Applications, including Excel, Word and PowerPoint.

Education and Accreditation:

• Bachelor's degree in Law, Cybersecurity, Information Technology, Business Administration, or a related discipline.
• An International Association of Privacy Professional (IAPP) certification or other comparable certification would be considered an asset.