Privacy Risk & Compliance Officer

Location: Staverton

Privacy Risk & Compliance Officer Salary
- Dependant on experience Location- UK Privacy Risk & Compliance Officer The Privacy Risk & Compliance Officer, formerly known as PRCO, is responsible for the overall administration and execution of the global compliance, risk and privacy programs for the country and or subsidiary. This position reports directly into the country management structure and has a direct line reporting relationship to the Regional Privacy Officer, the Head of Risk and the Head of Compliance.

Responsibilities Responsibilities will include:
The PRCO is responsible and accountable for the following activities as well as other activities at the direction of the local leadership team or the Regional Privacy Officer, the Head of Risk and the Head of Compliance. Privacy Management Privacy Notice/Consent Form Communication and Reporting – Ensure all new hires receive privacy notice/consent upon hire and all employees receive updated notices and consents as needed, working with local HR and recruiting teams.

Monitor and Track communication/disclosure of appropriate notices (when required) to ensure they are received by all employees Monitor and tracking of distribution and receipt of consent (when required) Evaluate and coordinate with the Global Privacy, Risk & Compliance Office on the communication of any privacy notice and/or consent Ongoing monitoring of all personal data processing activities for the country or subsidiary and escalating new or changes to existing personal data processing activity to the Global Privacy & Compliance Office.

Records of Processing (ROP) Completion & Ongoing Updates Ensure completion of ROP’s within One Trust for Controller & Processor ROP’s, including:
Ensure new or changes to existing personal data processing activities are appropriately documented and/or updated (controller and processor) Ensure new local clients or changes to existing local client processing activities are appropriately documented and/or updated In coordination with local/regional IT, review IT ROP’s to ensure accuracy, completeness, and are regularly updated In coordination with the appropriate SAM, ensure that data processing activities associated with new global clients are documented in the ROP Processor and changes to existing global client processing activities are appropriately documented and updated in the ROP Processor In coordination with local/regional Functions, ensure that new personal data processing activities are appropriately documented in the ROP Controller and is regularly updated with any changes to existing activities.

Records of Processing (ROP) Quality Review Review completed ROP’s to ensure completeness and accuracy Coordinate with functional team leads as necessary to ensure accuracy Client Contracts In coordination with SAM or local Account Managers, ensure existing clients have been notified regarding data privacy amendments, the negotiation process has been initiated, and client contracts have been updated with data privacy amendments as needed In coordination with Business Development, SAM, or local Account Managers, as appropriate, ensure liaison with the Legal Department so that contracts with new clients include the appropriate data privacy and compliance provisions.

Report to the Global Privacy, Risk & Compliance Office as requested on the status of client contract data privacy and compliance provisions negotiations. Vendor Due Diligence Review Ensure the Privacy and Compliance Due Diligence processes are conducted on all existing, as well as new vendors for the country or subsidiary – working with both local and global procurement In accordance with the process established by the Global Privacy & Compliance Office, review and approve completed Vendor Due Diligence Questionnaires, or escalate as needed to appropriate the SVP of Privacy or CPO and Regional Privacy Officer, In coordination with local Procurement, ensure that the Privacy and Compliance Due Diligence processes are completed prior to any new vendor contract execution Reporting Provide specific reporting metrics as required by the Global Privacy, Risk & Compliance Office on a…