Senior Analyst at Tower Group

Role purpose: Senior Specialist OPIA/PDPR:

• To identify all processes, products, assets and third parties within a business area (global records or local records) where there is processing of personal information so that risk assessments can be performed and appropriate control measures implemented so that the organization can become compliant to applicable privacy legislations.
• To document processing activities according to their process/product hierarchies (process or product catalogues) in oder to ensure that the correct data flow maps/diagrams can be created and kept up to date within the Record of Processing Activities (RoPA).
• To conduct assessments of existing organisational processes, products, services, Apps and sytems.
• To conduct re-assessments of high and medium risk assessments of processing activities in order to re-evaluate the risk levels and adequacy /effectiveness of controls.
• To conduct privacy impact assessments (Privacy by Design & Assurance) of new processes, products and systems to be launched by the client or changes to existing processes, products or assets to ensure that all critical and high new business risks have been identified and mitigated before any product, service, promotion or campaign is launched with the client.

Key accountabilities and decision ownership:
Process Mapping

• Identify primary record according to PRM reference model and then link process or sub-process to primary record accordingly.
• Product catalogue – ensure that there is an appropriate product catalogue with standard references and ensure that it is kept up to date per each business area.

High & Medium Risk Processing Activities Re-assessments

• Identify and conduct re-assessments of processes, products & assets every three years or when something significant changes.Up-to-date processing activity records information is maintained in the Personal Data Processing Register (PDPR).

Assessment Quality Assurance

• Ensure that all Organisational Privacy Impact Assessments (OPIA) and Privacy by Design (PDA) assessments performed meets the quality criteria in their respective areas.

Data Flow Map 

• Ensure that every business area where there is personal information processing keeps up to date data flow diagrams/maps that shows standard reference numbers (PRM reference model) for personal information flowing from or to other business areas.

Assets Risk Assessments

• Ensure that all assets associated with a processing activity have been assessed and risk rated accordingly.

Core competencies, knowledge and experience:

Process knowledge

• Ability to map business processes according to their hierarchical levels. Knowledge of telecoms processes and functions will be an advantage.

Business Analysis/Process Modelling

• Provide the client with a simple way to understand workflows by creating data-driven visual representations of business processes. Ability to analyse/document processes for privacy compliance or audit purposes.
• Experience in conducting privacy impact assessments using clearly defined methodologies or tools.

Risk & Compliance

• Ability and knowledge to ensure that the client executes its business processes in compliance with privacy laws and regulations, applicable professional standards and accepted business practices.

Self-starter

• Ability to work independently with high standard of accountability problem solving ability and owning responsibility around decisions, timelines and quality.

Business Skills & Stakeholder Management

• Excellent stakeholder management skills across all levels of the organisation. Experience within the technology & Telecoms industry & extensive exposure to working in a team environment

Must have technical / professional qualifications: 

• Engineering/Science/IT/Commercial/Business degree or NQF 7 equivalent
• Additional professional relevant certification will be an advantage.
• A minimum of 5 years relevant experience essential, with exposure to the following:
• Risk and compliance
• Business process related work
• Ability to build relationships and influence at all levels of the client
• Exceptional organisational and communication skills