Get daily job updates straight to your phone.Telegram
< Back to all jobs
Job Description
About The Job
- Act as the privacy point of contact for the APAC and inform the business of their privacy compliance obligations pursuant to Convatec’s Global Privacy Framework and applicable data protection laws
- Understand the organization and environment and establish an approach for the continual development of Governance and Privacy Programs within Convatec to ensure Convatec’s business entities have appropriate Governance and Privacy Frameworks in place.
- Support the implementation of Convatec’s Global Privacy Program within APAC to facilitate compliance with Convatec’s privacy policy/standards and applicable data protection laws. Provide expert support and consultancy to promote and facilitate privacy compliance.
- Implement, oversee and monitor Convatec’s Global Privacy Program activities such as policies and procedures; standards; guidelines; and tools within APAC. This also includes drafting and supporting the implementation of privacy notices, consent statements, data retention standards and other privacy compliance controls.
- Work with stakeholders to ensure that Data Privacy is considered in new product development, and technology change processes, and providing guidance on business initiatives.
- Identify personal data processing activities carried out by the business and execute privacy risk assessments (when required). Maintain up to date processing registry (Controller and Processor) for APAC.
- Drive and embed privacy by design controls into the APAC business processes, quality management systems, products and propositions.
- Identify specific training needs - create (tailor) and deliver privacy training to personnel with permanent or regular access to personal data or who is involved in the processing of personal data.
- Support the effective capture of metrics that indicate the health of data protection compliance in Convatec
- Act as Privacy Investigation Lead in response to potential personal data breaches for APAC per established protocol and documentation requirements.
- Upon request, provide privacy compliance support for the fulfilment of data subject requests (or privacy-related complaints).
- When required by internal standards/procedures, provide privacy support in the due diligence of third parties (such as when selecting third party Processors or during M&A transactions).
- Assist the Privacy Champion Network through developing key resources and tools and providing oversight on privacy related activities.
- Developing and delivering privacy training to various business functions
- Developing strategies and initiatives to ensure engagement with key internal and external stakeholders.
- Coordinating and conducting data privacy audit
- Participate in the improvement and enhancement of the Global Privacy Program by actively leading or working within the team on key privacy projects, such as maintaining the Data Privacy Centre, developing and implementing training and awareness materials, updating agreement inventory, etc.
- Minimum of a bachelor’s degree with preferred focus in Law or related field
- Hold at least one Data Protection and/or Privacy certification such as CIPP, CIPM, CIPT ISEB preferred
- Minimum 5+ years of experience within a compliance, legal, audit or risk function required with recent experience in privacy compliance, preferably in a regulated industry
- Extensive experience in Asia-Pacific and other regional data privacy laws, including the Brazilian General Data Protection Law (LGPD), PIPL and other data protection regulations, privacy frameworks and evolving legislation worldwide
- Experience in developing policy and compliance training.
- Experience with and knowledge of information technology and data management systems required.
- Sufficient knowledge of information technology and data management systems is required.