Description
GDPR Data Consultant Asset Management Banking Regulatory Information Security Privacy
Our client is one of the worlds leading and most respected asset management institutions. The opportunity has arisen for an information security and data protection consultant to assist them with projects related to GDPR and other regulations.
The successful candidate will coordinate privacy compliance activities globally, and will interact on a regular basis with members of the Legal & Compliance, Information Security, Technology, Business, and Audit groups as well as with other business leaders, and may represent the organisation externally on privacy matters. Candidates must have a record of providing sound and practical advice on compliance activities, particularly in data protection, in complex situations and must demonstrate their ability to influence others to implement that advice. Additionally, direct experience working for or with financial regulators and/or data protection authorities is highly desired.
KEY RESPONSIBILITIES :
- Advise on legal and regulatory aspects of compliance regarding data protection laws, rules and guidance applicable globally, in particular with respect to collecting, sharing and accessing personal information, marketing to consumers, providing and honouring opt-outs, fair process notifications, and data breach incident response.
- Legal advisor for GDPR compliance planning and implementation.
- Develop and implement compliance models for privacy, data protection, cross-border data transfers, and other privacy and personal data matters
- Monitor legislative and regulatory developments in the area of data protection and privacy
- Partner with control and oversight groups to create, maintain, test, and monitor best practices for privacy and data protection controls
- Participate and advise on data protection issues in firm-wide strategic initiatives
- Review data protection legislation and regulation and provide concise legal advice regarding potential impact to the firm
- Identify and mitigate data protection issues and risks
- Represent the firm in industry organizations and regulatory and legislative meetings and forums
- Relevant privacy and data protection experience, in particular with respect to the EU Data Protection Directive, the EU General Data Protection Regulation, the Privacy of Electronic Communications Directive, the ePrivacy regulation, the Data Retention Directive, and the EU CyberSecurity initiative.
- Familiarity with privacy laws and regulation in EU, Asia, and North and South America
- Experience working with regulatory frameworks in the banking/finance sector
- Privacy and/or Information Security qualifications (CISSP, CISM, CIPP, CIPM) desirable
- Experience developing presentations for senior leadership
- Strong computer and technical skills
- Excellent business judgment
- Degree and experience in law, international relations, and public policy are all desirable
- Ability to clarify tasks and requirements, organize time, and manage workload to ensure deadlines are met
- Ability to manage multiple tasks concurrently
- Ability to communicate effectively in verbal and written form
- Seeks to understand the international framework of data protection requirements
- Committed to thinking and acting with integrity and honesty
- Motivated, humorous, and personable with strong attention to detail
- Passionate about privacy and personal data protection
- Develops solutions to problems, checking where appropriate with senior management
- Takes ownership of problems and ensures they are resolved to meet objectives
- Rejects shortcuts that compromise quality of service