Protecting our information technology systems and data management practices from regulatory standards and best practices is a key responsibility of this role.
Key Responsibilities
1. Risk Management:
* Monitor and evaluate IT security measures, systems, and policies.
* Conduct and support IT risk assessments to ensure adherence to standards and regulations.
* Identify IT risks and develop risk mitigation strategies.
* Monitor and assess the efficiency of implemented IT risk management strategies.
2. Data Protection:
* Develop and implement the company's data protection strategy and policies.
* Ensure compliance with GDPR and other data protection laws.
* Monitor data processing activities and conduct data protection impact assessments.
* Serve as the point of contact between the company and Supervisory Authorities.
* Train and educate staff on data protection measures and protocols.
3. Compliance and Governance:
* Stay abreast of changes in data protection laws and regulations.
* Advise on data protection issues, privacy risks, and possible mitigation strategies.
* Assess new suppliers and new services setup on compliance with GDPR and other data protection laws.
* Handle queries from data subjects regarding personal data and privacy.
* Coordinate with other departments to establish and maintain data privacy protocols.