Reference: MJ003967Category: System securityBusiness unit: ITContract: RegularLocation: LondonAbout UsFounded in 1999 and listed on NASDAQ in 2003 and HKEX in 2021, Group is a leading global travel service provider comprising of , Ctrip, Skyscanner, and Qunar.
Across its platforms, Group integrates travel resources from industry partners and helps travellers worldwide pursue the perfect trip with exceptional travel products and services. We have six Customer Service Centres for , established in Japan, Korea, the UK, Thailand, Malaysia, and the Philippines, providing 24/7 customer service in 35 different languages.
We have more than 30,000 employees scattered across 50 countries in Asia, Europe, the Americas, and Oceania, striving to expand our global markets and aiming to be the world's leading and most trusted family of online travel brands that aspires to deliver the perfect trip at the best price for every traveller.
This role sits within the Group's Information Security department, where Europe is one of the regions under the highest regulatory pressure globally.
Apply now, read the job details by scrolling down Double check you have the necessary skills before sending an application.
As the local privacy compliance capabilities in Europe are still being developed, this position will serve as a key node on the European team and the InfoSec department's local interface in Europe, working closely with the local Legal and Government Relations (GR) teams to support European data protection work from a security and implementation standpoint, and bridging implementation between Europe and headquarters.
You are the region's first point of accountability on the security side: the coordinator and decision-maker in data protection, not a support role.
In this Role, you'll get to: Act as the InfoSec department's local interface in Europe, partnering with the local Legal and GR teams to support data protection work from a security and implementation standpoint; own external audit management.
Conduct privacy intelligence research and risk analysis, working with local legal and GR teams to track European privacy regulatory and security industry developments, identify potential compliance risks, and recommend improvements.
Lead European compliance programmes requiring close coordination with HQ Product and Engineering teams, focusing on GDPR implementation and technical solutions, such as DSR systems and GDPR compliance transformation.
Translate European legal requirements into clear technical requirements that HQ teams can understand and implement.
Own the annual surveillance reviews of UK ISO 27001 and Europrivacy, coordinate external audit processes, and drive the ongoing operation of the security and privacy management system within the GDPR framework.
Lead the local coordination of data incidents (e.g.
data breaches, regulator inquiries, DSR requests and data cases): incident triage, cross-functional mobilisation (Legal / GR / business lines / product and engineering), security-side impact assessment, providing security and technical facts to Legal and GR for their determination of statutory notification obligations, and remediation closure.
Drive cross-functional collaboration across time zones and languages, ensuring compliance requirements are implemented at a system level.
Provide day-to-day compliance guidance, including risk assessments, vendor reviews, and cross-border data transfer assessments for European business units. What you'll Need to Succeed:5+ years of experience in data privacy, compliance, or information security in Europe.
Strong understanding of GDPR and UK GDPR fundamentals, including DSRs, cross-border data transfers and DPIAs.
Solid experience in GDPR implementation or privacy solution design.
Experience collaborating with Product and Engineering teams, with the ability to translate legal requirements into practical technical solutions.
Able to collaborate effectively with local Legal and GR teams, translating regulatory context into actionable security and technical solutions.
Experience coordinating data incidents locally (e.g.
data breaches, regulator inquiries, DSR delays): independent triage, cross-functional mobilisation, security-side impact assessment, and supporting Legal and GR with the technical facts needed for statutory notification decisions.
Strong written and verbal communication skills. Comfortable working independently in a distributed, cross-cultural team: proactively sharing progress, staying reachable in remote and asynchronous collaboration, and owning items through to closure.
Nice to Have:
CIPP/E, CIPM, CISSP or similar certification.
Familiarity with certification frameworks such as Europrivacy, ISO 27001 and ISO 27701.Hands-on experience developing compliance programmes within a multinational organisation.
Computer science or information security educational background.
Why GroupAs a world leading company in travel industry, we provide a platform for our talent to unleash their power, make a global impact, and achieve a successful career.
As an international team, we're dedicated to create a space where open communication and mutual respect is encouraged.
At Group, we are here to support you in and out of the workplace, enabling you to explore and embrace more possibilities and pursue a dream life.
What's more? A fast-growing enviroment that offers strong potential for career growth and encourages bold ideas.
We focus on cutting-edge technology to provide some of the best platforms and resources for you to do your best work.
We encourage internal talent movement and provide global opportunities across functions, business units or regions for you to accelerate your career advancement.
Thrive in a talented, supportive team with genuine, rigorous, and focused individuals who can inspire you from day one.
Enjoy flexible working arrangement and various engagements outside of work that make your life at Group Fulfilling.
Click the link to learn more about "What Makes Group a Leading Global Travel Service Provider?"Click the link to learn more about "This Is a Trip Where Both Your Career and Life Can Flourish! xbpsjku "Find out more job opportunities at a good trip, and see you soon!
Senior Data Privacy Engineer(MJ003967) in Kennington employer: Trip.com
Trip.com is an exceptional employer, offering a vibrant and inclusive work culture in the heart of Edinburgh. With generous benefits such as 33 days of annual leave, a hybrid working model, and opportunities for continuous learning and career progression, employees are empowered to thrive both personally and professionally. Join a diverse team where many leaders began their journey in customer service, making it a fantastic place for meaningful and rewarding employment.
