PrivacyRisk &Compliance Officer

The Privacy Risk  &Compliance Officer, formerly known asPRCO,is responsible forthe overall administration and execution ofthe globalcompliance,riskand privacy programs for the country and or subsidiary.

This position reports directly into the countrymanagement structure and has a direct line reporting relationshiptothe Regional Privacy Officer,the Head of Riskand the Head of Compliance.

Responsibilities will include:

ThePRCOis responsible and accountable for the following activities as well asother activitiesat the direction of the local leadership team or the Regional Privacy Officer, the Head of Riskand the Head of Compliance.

Privacy Notice/Consent Form Communication  and Reporting –Ensure all new hires receive privacy notice/consent upon hire and all employees receive updated notices and consentsas needed,working with local HR and recruiting teams.

Monitor and Track communication/disclosure of appropriate notices(when required) to ensure they are received byall employees

Monitor and tracking of distribution and receipt ofconsent (when required)

Evaluate and coordinate with theGlobal

Privacy, Risk&Compliance Officeonthe communication ofanyprivacy notice and/orconsent

Ongoing monitoring ofallpersonal data processing activities for the country or subsidiaryand escalating new or changes to existingpersonal dataprocessingactivityto theGlobal

Privacy& Compliance Office.

Completion & Ongoing Updates:
Ensure completion ofROP’s within

OneTrustfor Controller & ProcessorROP’s, including:

Ensure new or changes to existingpersonal data processing activities are appropriately documented and/or updated(controller and processor)

Ensure new local clients or changes to existing local client processing activities are appropriately documented and/or updated

In coordination with local/regionalIT, review ITROP’s to ensure accuracy,completeness,andare regularly updated

In coordination withtheappropriate SAM,ensure that data processing activities associated withnew global clients are documented in theROPProcessor and changes to existing global client processing activities are appropriately documented and updated in theROPProcessor

In coordination withlocal/regional Functions, ensure that new personal data processing activities are appropriately documented in theROPController and is regularly updated with any changes to existing activities.

Records of Processing (ROP) Quality Review:
Review completedROP’s to ensure completeness and accuracy. Coordinate with functional team leads as necessary to ensure accuracy.

In coordination with SAM or local Account Managers, ensure existing client shave been notifiedregardingdataprivacy amendments, the negotiation process has beeninitiated,andclientcontracts have been updated with data privacy amendmentsas needed. In coordination with Business Development, SAM, or local Account Managers, as appropriate, ensure liaison with the Legal Department so that contracts with new clients include the appropriate data privacy and complianceprovisions.

Report to theGlobal

Privacy, Risk& Compliance Office as requested on the status of client contract data privacy and complianceprovisionsnegotiations.

Ensure the Privacy and Compliance Due Diligence processes are conducted on all existing, as well as new vendors for the country or subsidiary – working with both local and global procurement. In accordance with the protocol established by theGlobal

Privacy& Compliance Office, reviewandapprovecompleted Vendor Due Diligence Questionnaires, or escape as neededto appropriate the SVP of Privacyor CPOand Regional Privacy Officer. In coordination with local Procurement, ensure that the Privacy and Compliance Due Diligence processes are completed prior to any newvendor contractexecution.

Provide specific reporting metrics as required by theGlobal

Privacy, Risk& Compliance Office on a regular, consistent basis.

Support client bid activity, assisting with pre-sale conversations about all elements of PRCO role and business policies.

Deliver all go live activity to the TP control framework.

Ensure the implementation, maintenance and…