Privacy?Risk &?Compliance Officer

The Privacy Risk & Compliance Officer is responsible for the overall administration and execution of the global compliance, risk and privacy programs for the country and/or subsidiary. This position reports directly into the country management structure and has a direct line reporting relationship to the Regional Privacy Officer, the Head of Risk and the Head of Compliance.

Responsibilities

• The PRCO is responsible and accountable for the following activities as well as other activities at the direction of the local leadership team or the Regional Privacy Officer, the Head of Risk and the Head of Compliance.
• Privacy Management
• Ensure all new hires receive privacy notice/consent upon hire and all employees receive updated notices and consents as needed, working with local HR and recruiting teams.
• Monitor and track communication/disclosure of appropriate notices (when required) to ensure they are received by all employees.
• Monitor and track distribution and receipt of consent (when required).
• Evaluate and coordinate with the Global Privacy, Risk & Compliance Office on the communication of any privacy notice and/or consent.
• Ongoing monitoring of all personal data processing activities for the country or subsidiary and escalating new or changes to existing personal data processing activity to the Global Privacy & Compliance Office.
• Records of Processing (ROP) Completion & Ongoing Updates
• Ensure completion of ROPs within OneTrust for Controller & Processor ROPs, including ensuring new or changes to existing personal data processing activities are appropriately documented and/or updated.
• In coordination with local/regional IT, review IT ROPs to ensure accuracy, completeness, and are regularly updated.
• In coordination with local/regional Functions, ensure that new personal data processing activities are appropriately documented in the ROP Controller and is regularly updated with any changes to existing activities.
• Client Contracts
• In coordination with SAM or local Account Managers, ensure existing clients have been notified regarding data privacy amendments, the negotiation process has been initiated, and client contracts have been updated with data privacy amendments as needed.
• Report to the Global Privacy, Risk & Compliance Office as requested on the status of client contract data privacy and compliance provisions negotiations.
• Vendor Due Diligence Review
• Ensure the Privacy and Compliance Due Diligence processes are conducted on all existing, as well as new vendors for the country or subsidiary.
• In accordance with the process established by the Global Privacy & Compliance Office, review and approve completed Vendor Due Diligence Questionnaires, or escalate as needed to appropriate the SVP of Privacy or CPO and Regional Privacy Officer.
• Reporting
• Provide specific reporting metrics as required by the Global Privacy, Risk & Compliance Office on a regular, consistent basis.
• Compliance Management
• Ensure the implementation, maintenance and monitoring of the Global Compliance Framework within the area of responsibility.
• Act as point of contact for BCR/GDPR and other privacy and compliance related audits.
• Regularly measure and analyze the performance of Privacy, Risk and Compliance systems, assess the efficiency of privacy and compliance controls and recommend effective improvements.
• Risk Management
• The PRCO will be responsible for the implementation and maintenance of the risk management framework within the area of responsibility in-line with our strategic plans.
• Identification and assessment of risks within the scope of the PRCO.
• Provide guidance to local points of contact in identification and evaluation of risks.

Qualifications and Experience

• Integrity and commitment to compliance.
• Effective communication skills with both front-line representatives and management.
• Proficient in Microsoft Office including a good working knowledge of PowerPoint and Excel.
• Previous work experience in either risk, compliance or privacy.
• Fluent in English.
• Strong analytical skills and the ability to apply critical thinking skills to a given problem or project.

Education: Bachelor Degree. Professional qualifications in either security, privacy, compliance or risk management.