Overview
Position
Data Privacy Business Partner Associate
Job Code
Reports to
Direct Reports
n/a
Division/Section
Department
Data Privacy
Sector
Governance Risk Compliance (GRC)
Job Family
Role Purpose
The Data Privacy Business Partner Associate (the Associate) will operate as a member of the Data Privacy Office at NEOM Company, delivering a range of data privacy activities to ensure compliance with applicable regulations, and undertaking tasks to assist in embedding and maturing a state-of-the-art data privacy framework at NEOM.
The NEOM Data Privacy Office is a new function and is evolving rapidly to support the changing needs of the business. The Associate will be required to support the Data Privacy Business Partner in her day-to-day tasks as they evolve and will be expected to multi-task within the office in addition to focusing on the specialist areas set out below.
Key Accountabilities & Activities
Training and Awareness
- Assist in the execution of a data privacy training and awareness plan
- Develop materials for training and awareness on all components of the data privacy framework
- Support delivery of both general awareness activities and targeted training initiatives
Record of Processing Activities (RoPA)
- Work with all entities across NEOM Company to maintain the ROPA
- Assist with the implementation of procedures across all NEOM entities for updating and validating the ROPA
- Assist with the implementation and maintenance of tools to automate the ROPA process
- Ensure that the ROPA is maintained, updated and validated according to procedures
Data Subject Rights (DSR) Requests
- Maintain procedures for managing DSR requests
- Assist with the implementation of procedures across all NEOM entities for managing DSR requests
- Assist with the implementation and maintenance of tools to automate the DSR management process
- Ensure DSR requests are managed according to procedures
Stakeholder Management
- Handle inquiries and requests from stakeholder across all NEOM entities
- Build an effective relationship with stakeholders across all NEOM entities
Background, Skills & Qualifications
Knowledge, Skills and Experience
- Minimum 3 years of data privacy experience in a global organisation (first or second line) with other commercial experience of process and change implementation an advantage
- Experience of working with multiple departments to support the delivery of team goals
- Experience in developing and delivering training and awareness initiatives in a regulated environment a distinct advantage
- Experience in drafting privacy procedures and processes (first or second line)
- Demonstrated understanding and application of data privacy laws and regulations
- Experience in implementing process changes and controls to mitigate risks and address regulatory requirements (first or second line)
- Experience in project management and change management an advantage
- Experience in building and maintaining a RoPA
- Good written and oral communication skills and ability to engage a variety of stakeholders and tailor messages to intended audience
- Good commercial awareness and ability to develop and implement practical compliance solutions which enable business objectives
- Motivated self-starter with ability to work on own initiative
Qualifications
- Bachelor Level Degree
- Data Protection certifications preferred or willingness to pursue certification on take up of role
COMMUNICATION - MAIN STAKEHOLDERS
Internal
External
GRC Departments
Business Departments / Privacy Champions
Communications Teams