Privacy Compliance Expert

标准职责

全面负责某一业务领域的安全事务；指导完成多领域的网络安全支持工作，合理布局与能力建设构建本领域的端到端安全保障能力。主动思考、深刻理解和把握客户的安全需求，直接和关键利益相关人沟通，带领团队给出综合性的解决方案，消除安全质疑。组织决策与评审安全红线等安全政策，促进体系化。

自定义职责

1. Act as privacy and data protection advisory point of contact for appropriate business, data subjects and functional stakeholders.
2. Manage communication channels, incl. DPO mailbox and DPO welink channel.
3. Support the day-to-day data privacy activities of the Data Protection Office and provide support in strategic efforts to ensure data privacy compliance.
4. Assist in handling inquiries and issues related to data privacy.
5. Advise on the fulfilling of data subject rights requests and handle escalations.
6. Support communications with supervisory authorities.
7. Support with data breaches in assessing, documenting and, where appropriate, notifying data breaches to data subjects and authorities.
8. Monitor, supervise, review and coordinate DPIA performance/drafting.
9. Conduct research and analysis of European and international privacy landscape and synthesize into insights for business and senior leadership.
10. Coordinate and collaborate with the data privacy coordinators (GSPO, RSPO, CSPO, PI) on a regular basis.
11. Contribute to developing and updating policies and procedures for compliance.
12. Lead and conduct internal inspections and support external audits.
13. Lead/assist in developing and delivering data privacy training to employees and leadership.
14. Support in building and maintaining reporting dashboards and presentation materials to senior leadership.
15. Collaborate with internal groups such as Legal, IT Security, HR, Procurement, and Marketing to address inquiries, identify privacy gaps, propose solutions, and incorporate practical approaches into official procedures.

语言要求

英语

教育背景要求

本科及以上

技能要求

• writing policy and process documents, and risk assessment methods.

能力要求

• General capabilities : communication and project management capabilities
• Professional capabilities : standard insight and analysis capabilities; Risk identification capability; Compliance management and operation capabilities; External communication and trust building capabilities

知识要求

• sound knowledge of privacy protection principles and laws and standards of global mainstream countries/regions, such as GDPR and China Personal Information Protection Law. Master the privacy protection governance framework, policies, and processes.

专业证书要求

（无）

其他要求

• Pass at least one international certification in the privacy protection field such as CIPM, CIPT, and CIPPE.
• Fluent in English
• Ethical, trustworthy, reliable