Data Protection Officer at Experian

Job Description

• To further embed data protection and privacy in our business by facilitating and monitoring compliance to data privacy legislation(s) and internal policies.

Qualifications

• CIPP/E, CIPM or other recognized data privacy / data protection qualification is desirable
• Two or more years of experience in a compliance and/or legal role Demonstrated experience in monitoring compliance with regulatory requirements and company policies
• Working knowledge of POPIA
• Experience in managing multiple stakeholders at all levels

Experience in working on OneTrust is desirable

• Experience in implementing a compliance program
• Experience in monitoring compliance with regulatory requirements
• Engaging with and influencing key business stakeholders
• Advising on data protection matters.
• Experience facilitating training and awareness
• Working knowledge and implementation of data privacy legislation in South Africa
• A passion for data privacy and applying it in a business conducive manner.
• Well organised and deadline driven individual with the ability to work effectively under pressure
• Excellent verbal and written communication skills with strong attention to detail

Additional Information

• Develop, implement and maintain a data privacy compliance monitoring program
• Implement and manage an effective privacy compliance program
• Monitor and evaluate the effectiveness of existing privacy controls
• Develop new and review existing internal data privacy policies and procedures
• Create and manage effective action plans in response to monitoring discoveries and compliance violations
• Regular monitoring and testing of company procedures, practices and documents to identify potential risks
• Update and maintain privacy framework and guidelines as necessary
• Support in the investigation, management and reporting of breaches and/or privacy incidents
• Maintain and document existing and new processing activities
• Ensure appropriate retention, deletion concepts and procedures are maintained for structured and unstructured data internally and data held at third parties. Monitor and maintain deletion certificates where applicable
• Promote a culture of data protection and compliance by consistently educating all employees on important privacy requirements, processes and policies
• Ensure quality assurance of PI is in place and maintained
• Assess the business operations to determine compliance risk/s