Master Works is seeking a Personal Data Protection, Senior Specialist to support the organization in establishing, implementing, and maintaining effective personal data protection and privacy practices.
The role will be responsible for supporting compliance with applicable personal data protection laws, regulations, policies, and internal controls, while working closely with business, legal, risk, information security, and technology teams to ensure personal data is appropriately managed and protected throughout its lifecycle.
Key Responsibilities
- Support the implementation and continuous improvement of the organization's personal data protection and privacy framework.
- Monitor and support compliance with applicable personal data protection laws, regulations, policies, and standards.
- Develop, review, and maintain personal data protection policies, procedures, guidelines, and controls.
- Support the identification, assessment, and mitigation of personal data protection and privacy risks.
- Collaborate with Information Security, Risk, Legal, IT, Data Management, and business teams on data protection initiatives.
- Support the classification, handling, storage, retention, and secure processing of personal data.
- Assist in assessing data processing activities and identifying privacy and data protection requirements.
- Support privacy and data protection assessments, audits, and compliance reviews.
- Monitor and report on personal data protection compliance, risks, and control effectiveness.
- Provide guidance to relevant stakeholders on personal data protection requirements and best practices.
- Support awareness and training initiatives related to personal data protection and privacy.
- Keep up to date with changes in personal data protection laws, regulations, standards, and industry practices.
- Contribute to the continuous improvement of personal data protection processes, controls, and governance practices.
Requirements
Education
- Bachelor's degree in information technology, Computer Science, Cybersecurity, Law, or another related field.
Experience
- 5+ years of relevant professional experience in data access, data protection, privacy, information security, data governance, risk, compliance, or a related field.
- Experience in personal data protection, privacy, risk management, or information security is highly preferred.
- Experience working with data protection policies, frameworks, controls, and compliance requirements.
Knowledge & Skills
- Good knowledge of Personal Data Protection laws, regulations, policies, and compliance requirements.
- Strong understanding of data protection and information security principles.
- Knowledge of data classification, data privacy, data handling, and information protection practices.
- Understanding of privacy and data protection risks and related controls.
- Ability to interpret regulatory requirements and translate them into practical policies, processes, and controls.
- Strong analytical, problem-solving, communication, and stakeholder management skills.
- Ability to work effectively with cross-functional teams, including Legal, Risk, Information Security, IT, and business functions.
Preferred Certifications
- Certified Information Privacy Manager (CIPM)
- Certified Information Privacy Technologist (CIPT)
Job Location: Client Site