Data Privacy Officer

Role & responsibilities

The Data Privacy Officer (DPO) and PMO Lead will play a dual role, responsible for overseeing the organizations data privacy compliance program while simultaneously managing the project management office (PMO) to lead the firm towards a mature state of compliance. This role requires a strong understanding of privacy regulations, risk management, and compliance frameworks, coupled with exceptional program management skills to drive cross-functional initiatives.

Key Responsibilities

1. Data Privacy Officer Responsibilities

• Compliance Oversight:
  • Ensure the organization complies with global data privacy regulations (e.g., GDPR, CCPA, DPDPA).
  • Develop, implement, and maintain data protection policies and procedures.
  • Monitor and report on compliance levels, identifying areas for improvement.
  • Risk Management:
  • Conduct Data Protection Impact Assessments (DPIAs) for new processes or systems.
  • Manage the organizations data breach response process, including investigation, resolution, and reporting.
  • Training and Awareness:
  • Lead data privacy training programs for employees, ensuring awareness of regulatory requirements.
  • Foster a culture of privacy and data protection across the organization.
  • Stakeholder Engagement:
  • Act as the primary point of contact with regulatory authorities and external stakeholders on data protection matters.
  • Collaborate with legal, IT, and operational teams to embed privacy-by-design in projects and processes.
  

2. PMO Lead Responsibilities

• Program Leadership:
  • Establish and manage a comprehensive program roadmap to achieve a mature compliance state.
  • Coordinate cross-functional teams, ensuring timely delivery of privacy and compliance initiatives.
  • Governance and Reporting:
  • Define and implement PMO governance frameworks, including project charters, milestones, and KPIs.
  • Provide regular updates to senior leadership on project progress, risks, and mitigation plans.
  • Process Optimization:
  • Drive continuous improvement in compliance processes and project management methodologies.
  • Streamline workflows to integrate privacy requirements into operational processes seamlessly.
  • Vendor and Tool Management:
  • Oversee the selection, implementation, and management of data privacy tools and technologies.
  • Ensure third-party vendors meet contractual data protection obligations.

Experience:

• Minimum 7+ years of experience in data privacy, compliance, or information security roles.
  • Proven experience in project management, leading cross-functional teams, and delivering enterprise-wide programs.
  • Strong understanding of global privacy regulations and standards (e.g., GDPR, DPDPA, ISO 27701).
  

Skills:

• Regulatory Expertise: Deep knowledge of data protection laws and frameworks.
  • Project Management: Proficient in program management tools and methodologies, with a track record of delivering complex projects on time and within scope.
  • Leadership: Excellent stakeholder management and ability to influence senior executives.
  • Analytical: Strong problem-solving and risk assessment skills.
  • Communication: Exceptional verbal and written communication skills to articulate complex concepts effectively.
  

Key Performance Indicators (KPIs):

• Percentage of compliance with global and local privacy regulations.
  • Timely completion of compliance and maturity initiatives.
  • Reduction in data privacy risks and incidents.
  • Successful implementation of PMO frameworks and project milestones.
  • Employee engagement and awareness levels regarding data privacy.
  

Preferred candidate profile

Perks and benefits