Data Privacy Officer

We are seeking an experienced Data Privacy Officer (DPO) to lead the company’s data privacy strategy and ensure compliance with global data privacy laws and regulations. The DPO will oversee the development, implementation, and management of data protection policies and practices across the organization. This role requires a deep understanding of data privacy laws (e.g., GDPR, CCPA) and the ability to work cross-functionally to ensure the protection of personal data. The ideal candidate will be proactive, detail-oriented, and have experience in data privacy and security compliance.

Key Responsibilities :

Data Privacy Compliance and Strategy :

Oversee the development and implementation of the company’s data privacy strategy to ensure compliance with applicable privacy laws, such as GDPR, CCPA, HIPAA, and others.

• Advise the organization on data privacy risks, regulatory requirements, and industry best practices.
• Stay up-to-date with changes in privacy laws and regulations, and ensure that the company’s policies and practices remain compliant.

Policy and Procedure Development :

Develop, review, and maintain data privacy policies, procedures, and guidelines to ensure they align with legal requirements and organizational goals.

Data Subject Rights and Requests :

Manage data subject rights requests (e.g., access, rectification, deletion, portability, objection) and ensure timely, compliant responses.

Risk Management and Privacy Impact Assessments (PIA) :

Conduct regular privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) to assess and mitigate risks related to data processing activities.

Training and Awareness :

Develop and deliver data privacy training programs to employees, ensuring they understand their obligations under data privacy laws and the company’s policies.

Incident Management and Breach Response :

Oversee the process for responding to data privacy incidents or breaches, ensuring compliance with reporting requirements to regulators and affected individuals.

Third-Party Management :

Ensure that data privacy requirements are met when working with third parties (vendors, contractors, partners) by conducting due diligence and managing privacy risks associated with data sharing.

Monitoring and Auditing :

Monitor and audit internal data processing activities to ensure compliance with data privacy policies, procedures, and legal requirements.

Regulatory Liaison :

Serve as the primary point of contact with data protection authorities and regulatory bodies.

Qualifications :

Education and Experience :

Bachelor’s degree in Law, Information Technology, Data Privacy, or a related field.

Technical Skills :

Knowledge of data privacy laws, frameworks, and guidelines (GDPR, CCPA, HIPAA, etc.).

Knowledge and Competencies :

Strong understanding of global data protection laws, regulations, and industry standards.

Certifications (Preferred) :

Certified Information Privacy Professional (CIPP) or similar data privacy certifications (e.g., CIPM, CDPSE).

What We Offer :