Privacy Manager

Job Overview:

The Privacy Manager is responsible for overseeing the company's privacy program, ensuring that all personal data collected, processed, stored, and shared is handled in compliance with privacy laws and industry regulations. This role plays a key part in protecting customer and business data from unauthorized access and ensuring that privacy policies are embedded into every stage of the data lifecycle. The Privacy Manager will work closely with legal, compliance, IT, and data governance teams to establish and enforce privacy standards.

Key Responsibilities:

• Privacy Program Management:
  Lead the development, implementation, and ongoing management of the company's data privacy program. Ensure that all personal data is collected and used in compliance with applicable privacy regulations (e.g., GDPR, CCPA, and telecommunications-specific laws).
• Regulatory Compliance Monitoring:
  Monitor compliance with relevant privacy laws and regulations. Collaborate with legal and compliance teams to interpret laws, determine their impact on the organization, and implement necessary changes to policies and practices.
• Data Protection and Risk Management:
  Ensure the safeguarding of sensitive data throughout its lifecycle by implementing best practices for data access control, encryption, anonymization, and retention. Regularly assess risks and develop strategies to mitigate potential data breaches or non-compliance issues.
• Privacy Impact Assessments (PIA):
  Conduct PIAs to identify privacy risks in new projects, technologies, and processes. Work with business units and IT teams to integrate privacy requirements into product development, data systems, and customer interactions.
• Incident Management and Reporting:
  Act as the primary point of contact for managing privacy-related incidents, including data breaches. Coordinate investigations, communicate with affected stakeholders, and report incidents to regulatory authorities as required.
• Policy Development and Training:
  Develop, maintain, and update the organization’s privacy policies. Provide training and support to employees, ensuring they understand privacy requirements and their responsibilities for safeguarding data.
• Collaboration with Governance and IT Teams:
  Work closely with the Data Policy Manager, IT/Data Alignment Manager, and Metadata Manager to ensure privacy requirements are incorporated into data governance practices and technical systems.
• Stakeholder Liaison:
  Serve as the primary liaison for internal and external stakeholders, including regulators, customers, and auditors, on all matters related to data privacy. Provide regular reports to senior management on the status of the privacy program, risks, and compliance efforts.
• Audits and Compliance Monitoring:
  Conduct regular privacy audits and assessments, ensuring ongoing compliance with internal policies and external regulations. Ensure that any non-compliance issues are addressed promptly and effectively.
• Data Retention and Deletion Management:
  Oversee data retention policies to ensure personal data is not retained longer than necessary and is disposed of securely. Coordinate with data governance and IT teams to enforce proper data archiving and destruction practices.

Qualifications:

• Bachelor’s degree in Data Privacy, Information Systems, Law, or a related field. Certifications such as CIPP, CIPM, or CIPT are highly desirable.
• 5+ years of experience in data privacy or compliance roles, with a strong focus on managing privacy programs and regulatory compliance.
• Thorough understanding of data protection regulations, including GDPR, CCPA, and telecommunications-specific privacy laws.
• Experience working with cross-functional teams, including legal, compliance, IT, and business units, to implement privacy controls and practices.
• Strong knowledge of privacy-enhancing technologies, including encryption, pseudonymization, and data masking.
• Proven ability to manage privacy incidents, including data breaches, and lead investigations and reporting efforts.
• Excellent communication skills, with experience reporting to senior leadership and regulatory bodies.

Skills:

• Privacy Expertise: Deep understanding of privacy laws and regulations, with a focus on telecommunications industry-specific requirements.
• Technical Knowledge: Familiarity with data protection tools, identity management systems, encryption, and privacy-enhancing technologies.
• Risk Management: Ability to assess privacy risks, implement mitigation strategies, and manage compliance efforts.
• Incident Response: Strong crisis management skills to handle privacy incidents and collaborate with stakeholders during investigations.
• Collaborative Leadership: Ability to work effectively across departments to implement and enforce privacy standards.
• Communication: Strong ability to communicate complex privacy issues clearly to non-technical stakeholders and senior leadership.

The Privacy Manager plays a critical role in ensuring that the company complies with global and industry-specific data privacy regulations. By working closely with the broader data governance team, the Privacy Manager ensures that data protection is integrated into every aspect of the data lifecycle, mitigating privacy risks while maintaining business agility.

#LI-KP