Data Privacy Specialist – Marketing at NTT Ltd.

Position Overview

• The Data Privacy Marketing Specialist, reporting into the global Data Privacy Corporate Implementation Services Lead and will be responsible for supporting the effective implementation and oversight of the Data Privacy program within the Marketing function globally. The Data Privacy Marketing Specialist will work closely with stakeholders within the Marketing function to ensure that appropriate data privacy controls, across people, processes and technology, are put in place to support compliance with data protection laws and regulations, industry standards and NTT DATA, Inc.’s global Data Privacy policies.

Key Roles and Responsibilities
 Policy, Governance & Oversight

• Implement NTT DATA Inc.’s Data Privacy policies, processes, and standards within the Marketing function.
• Lead and support Data Privacy strategic projects and initiatives across global Marketing operations.
• Support the integration of global data protection requirements into Marketing processes, systems, and transformation initiatives.
• Contribute to and maintain the Record of Processing Activities (ROPA) for Marketing, ensuring data flows, purposes, and cross-border data transfers are accurately documented and aligned with global and local requirements.
• Project manage the Data Privacy requirements of new Marketing transformation projects, digital tools, and initiatives.

 Marketing Initiatives, Operational Compliance & Risk Management

• Support the implementation of Marketing centralization and integration initiatives, ensuring consistent Data Privacy practices, documentation and controls.
• Ensure data migration, consolidation and integration activities involving personal data are conducted in compliance with applicable data protection regulations and NTT DATA Inc’s Data Privacy standards.
• Conduct or support Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs)
• Identify, document, and assess Data Privacy risks within Marketing and develop strategies to manage or mitigate them.
• Coordinate and support responses to Data Subject Requests (DSRs) related to Marketing data, ensuring timely and compliant resolution.
• Support the investigation, response, and closure of personal data breaches or incidents involving Marketing systems or campaigns, ensuring appropriate remediation and notification.
• Monitor and report on the implementation and effectiveness of Data Privacy controls within the Marketing function.
• Partner with Data Governance, Legal, and Information Security to ensure consistency across risk management, classification, and incident response frameworks.

Marketing Data, Consent & Cookies

• Design, implement, and maintain Consent and Preference Management frameworks across all Marketing systems (websites, CRM, automation tools) to ensure lawful processing, accurate consent capture.
• Oversee cookie and tracking governance, ensuring cookie banners, disclosures, and preference centres comply with global ePrivacy and data protection requirements.
• Ensure legislative and regulatory updates are reflected in the cookie management platform and that all cookies and trackers are accurately categorized, regularly reviewed, and compliant with user consent.
• Define and oversee data retention and minimization controls for Marketing systems, ensuring personal data is retained only as long as necessary for legitimate business or legal purposes.
• Partner with Marketing teams globally to ensure privacy compliance in campaign design and execution, including lawful basis assessments, list management, and audience targeting.
• Assess and monitor third-party AdTech, analytics, and tracking providers for compliance with data protection requirements and consent preferences.

AI, Technology & Vendor Governance

• Support the Marketing function in managing and reviewing AI-driven use cases involving personal data, ensuring alignment with NTT DATA Inc.’s AI Governance Framework, ethical AI standards, and privacy-by-design principles.
• Embed Privacy by Design and Default into the onboarding, configuration, and integration of Marketing technologies and automation platforms.
• Ensure vendor and third-party privacy assessments are completed, Data Processing Agreements (DPAs) are in place, and appropriate technical and organizational measures are implemented.
• Review and document cross-border data transfers involving Marketing vendors or systems, ensuring compliance with approved transfer mechanisms (e.g., SCCs, BCRs).

Awareness, Reporting & Continuous Improvement

• Develop and deliver Marketing specific Data Privacy training and awareness to build understanding of privacy by design, consent, and ethical data practices.
• Monitor developments in global data protection, ePrivacy, and marketing regulations and assess their impact on Marketing operations and technology.
• Participate in Data Privacy governance forums and provide updates on Marketing privacy performance, risk areas, and compliance status.
• Maintain professional and technical expertise by participating in industry forums, training, and continuous development.

Knowledge, Skills and Attributes

• Demonstrates accuracy and thoroughness and high levels of attention to detail
• Demonstrates strong analytical skills, including the ability to assess risk and impact from a data privacy and protection perspective
• Demonstrates a pragmatic and risk-based approach to data privacy
• Excellent leadership, creativity, presentation, writing and collaboration skills
• Excellent written and verbal communication skills (including leadership and no-leadership) and negotiation skills
• Ability to thrive under pressure, function and deliver effectively in a fast-paced environment
• Ability to work well independently and productively with minimal supervision
• Proactive in approach with high levels of motivation, being a self-starter with good planning and organizing skills
• Ability to work well in a team environment
• Demonstrates strong stakeholder engagement skills coupled with the ability to conduct presentations to both technical and non-technical stakeholders
• Positive role model, demonstrating the ability to coach, inspire and mentor others
• Strong critical thinking and decision-making skills
• Strong organizational and project management skills, including the ability to manage competing tasks and prioritize effectively
• Experience managing complex projects and working alongside cross-functional teams
• Deep knowledge of global data protection laws and regulations
• Operates with a high degree of integrity

Academic Qualifications and Certifications

• Bachelor’s degree
• CIPT, CIPP, CIPM (Preferred)

Required Experience

• +5 years’ experience in Data Privacy or related fields
• Experience in implementing Data Privacy programs and controls in Marketing functions in multinational organizations
• Understanding of Marketing processes and frameworks 
• Relevant degree and/or Data Privacy certifications and qualifications (e.g. CIPP/E/CIPM/AIGP)
• Experience in advising on complex data protection matters with practical advice
• Experience in risk management activities and practices (preferred)
• Experience in working with or advising large, multinational organizations
• Experience in working on compliance projects
• Experience in telecommunications, technology and/or professional services (preferred)
• Experience with One Trust, 6clicks, Secure Privacy (preferred)

What will make you a good fit for the role?

• Passionate about Data Privacy and up to date with the latest developments in Data Privacy globally
• Able to communicate effectively with internal and external parties at all levels
• Comfortable and proficient working in a role that interfaces with multiple cultures and time zones
• Analytical mind, initiative and able to work independently
• Excellent in time management and able to manage competing priorities
• Able to work under pressure
• Willing to travel locally or overseas