About Us: Tsaaro is dedicated to Data Privacy and Security as its core focus. Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions. Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints.
At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice. By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and privacy challenges.
Responsibilities:
As an Associate Director, you will be entrusted with the following key responsibilities:
Develop, implement, and maintain comprehensive data privacy policies and procedures in alignment with global regulations (GDPR, CCPA, etc.), ensuring compliance across all company operations.
Manage and conduct privacy risk assessments, including records of processing activities (ROPA), data protection impact assessments (DPIA), and legitimate interest assessments (LIA).
Collaborate with sales teams to enhance client engagements with data privacy expertise and identify new business opportunities in data privacy services.
Prepare and update privacy documentation, such as data protection agreements and internal policies, while applying a risk-based approach to data protection reviews.
Identify potential data privacy risks, implement corrective measures, and manage data privacy incidents and breaches, including response plans and reporting.
Collaborate with legal, IT, security, and other departments to integrate privacy practices and drive the implementation of privacy technologies and tools.
Develop and deliver training programs on data privacy best practices, providing guidance to stakeholders at all levels.
Monitor changes in data privacy laws and update company policies, while preparing reports on compliance for senior management.
Lead data privacy projects and initiatives, participate in industry forums, and engage with external stakeholders, including regulators and clients.
Lead GRC initiatives to align privacy practices with broader business strategies, ensuring effective risk management and strong client relationships.
Requirements
Qualification:
Bachelordegree in Law, IT, Business Administration, or a related field.
A Masterdegree is preferred.
Experience:
Minimum of 8-10 years of experience in data privacy and protection, with a track record of managing complex data privacy programs.
Skills and Knowledge:
In-depth knowledge of global data protection laws and regulations, including GDPR, CCPA, etc.
Strong analytical and problem-solving skills.
Excellent communication and leadership abilities.
Proficiency in data privacy tools and technologies.
Certifications:
Relevant certifications such as CIPP, CIPT, CIPM are a plus.
Benefits
Competitive salary and performance-based bonuses.
Flexible working hours and remote work options.
Collaborative and inclusive work environment.
Opportunity to work with a passionate team dedicated to making a difference in data privacy and security.