
Privacy Manager, Regional Data Protection Officer
- São Paulo - SP
- Permanente
- Período integral
- Support the wider privacy office with the development of standards, policies, provide strategic direction and advice on privacy matters across the region, ensuring such activity is aligned to the global privacy framework and goals of the business.
- Perform the statutory Data Protection Officer tasks (as outlined by regional/country-specific laws), either personally or via assistance from other functions.
- Report to the VP, Group Data Protection Officer and RVP’s and MD on data privacy strategy, progress, risks and issues in local markets within the region.
- Adopt close collaboration with MDs and Privacy Champions to ensure the data privacy and information security framework is tailored to local laws and embraced and embedded into local markets using local resources (including country specific law firms and consultants).
- Initiate, facilitate and promote activities to foster data privacy and information security awareness throughout the business including implementing privacy by design.
- Draft and implement required consistent policies, processes, guidance, training and communication in compliance with existing and evolving legislation; compiling records to help demonstrate compliance with accountability requirements.
- Lead and provide integration support for new markets and acquisitions in the region as part of the Global Mergers and Acquisitions integration team.
- Support of existing business and systems’ compliance against privacy framework (including internal policies and relevant legal and regulatory requirements).
- Mentor junior privacy team members including acting as direct reporting line and manager to junior roles within the Privacy team globally.
- Proactively maintain a detailed knowledge and understanding of relevant legislation, guidance and developments across the Region and throughout the territories for which you have primary responsibility.
- Detailed knowledge and experience in applying data protection privacy legislation to a multi-national business’ strategy.
- Strong risk management skillset, with the ability to communicate risks and solutions in a succinct manner.
- Excellent communication, interpersonal and presentation skills at senior management level with demonstrable ability to bring the business on side.
- Strong project management and administrative skills.
- Ability to demonstrate innovative management reporting, compliance monitoring approaches and the ability to implement them.
- A demonstrated ability to develop sound strategies and improve business processes and controls.
- Demonstrable ability to be well organised, complete several simultaneous projects on deadline, managing workload and delivery expectations.
- Understanding and usage of OneTrust and/or similar compliance platform(s), including creation and ownership of templates and integration with existing privacy processes.
- Strong analytic capabilities and written and oral communication skills.
- Exceptional interpersonal skills with proven experience in building relationships with senior stakeholders, peers and business partners.
- Excellent written and spoken English & Spanish.
- Privacy qualifications (such as IAPP, BCS, CIPP, ISEB or similar) are desirable, however demonstrable practical experience in privacy & risk management would be prioritized.
- Given the multi-market footprint of the role, relevant additional languages, such as Portugese, are highly valued.
- Understanding and experience working with and evaluating information security controls and standards.