.The OpportunityKey ResponsibilitiesSupporting the Data Protection team in the day-to-day maintenance and management of the data privacy controls under ESW's Privacy Information Management System, 'PIMS' (ISO 27701).Assist with the development and maintenance of policies, standards, processes, and guidelines for the operation of the PIMS.Support the operation of the company's Third-Party Risk Management and Due Diligence processes as SME by performing data privacy risk assessments for new vendor and retailer onboarding.Perform ad-hoc risk assessments of the company's personal data processing practices and make recommendations regarding their risk mitigation.Continually partner with business stakeholders to understand and document the lifecycle of personal data to ensure that the Records of Processing Activities ('ROPA') is continuously maintained and kept up to date.As part of the Data Protection Office team, provide advice and guidance to business areas on compliance with data protection law and regulations e.G., the GDPR, S.I. No. 336/2011 ('ePrivacy Regulations') etc.Help promote a strong Data Protection culture within ESW by assisting in the design and implementation of training and awareness materials and work with the Learning and Development Team on the roll-out of same.Work with business stakeholders to periodically monitor, test, and provide assurance over data protection practices.Involvement in projects and other business initiatives ensuring Data Protection Impact Assessments ('DPIAs') are completed where required.Ensure that the business manages and responds to Data Subject Rights Requests in line with regulatory requirements and timelines.Effectively communicate the status of the Privacy Programme to the Data Protection Manager and DPO; assist in the management and reporting of applicable KPIs and metrics.Oversee the resolution by the business of personal data breaches, including their risk assessment, and provide advice regarding risk mitigation. Support the DPO in the reporting of data breaches to the relevant Data Protection Supervisory Authority, where required.Attend various meetings, committees, and forums with the Data Protection Manager and/or DPO; act as delegate when required.Support the Data Protection Office with the integration of data protection activities across a global matrix organisation.Perform regular horizon scanning to keep abreast of key developments in data protection.Key Experience & SkillsMinimum of two years of experience working in data protection/privacy.Professional qualification/certification (or working towards) in data protection law is desirable.Proven experience with privacy operations within a technology, e-commerce or retail business is preferred.Experience in supporting the implementation of data protection policies, standards, processes to achieve business objectives
