SENIOR MANAGER - DATA PRIVACY

Overview Please Note.
This is an Asia - Pacific (Remote/Location free) role and prefer to hire talent from India and other APAC countries like Thailand, Vietnam and Philippines.
Main purpose.
  The Data Privacy Analyst will form part of the Data Privacy Center of Excellence (CoE) operations.
  Data Privacy Analyst’s will report Day-To-Day to the CoE Operations Manager and Functionally to the Head of CoE.
The purpose of the CoE is to ensure that PepsiCo (PEP) complies with a) Global PEP Privacy Policy & Framework; and b) existing and / or emerging privacy laws, across the various sectors.
  Supporting the sector privacy legal in the design and roll out of a privacy training programs and promoting privacy awareness throughout the business to keep privacy on the business agenda Responsibilities Accountabilities.
Standards, framework, controls and policies.
Driving and supporting the integration of and embedding of privacy standards, controls and policies into standard business processes.
Incl.
the 10 global privacy principles Adoption of Global PEP Privacy Tooling.
Encourage use and adoption (e.
.
by training) by the business of the new Global Privacy Tooling (e.
.
OneTrust) for privacy related governance and operations; Privacy Risk Assessments (PIAs) for businesses / functions engaged in data processing.
manages and ensures adoption of PIA process by the business, documents remediation plans, monitors their execution and provides appropriate updates to Privacy Councils.
This also involves if PIAs trigger a high risk processing activity that may need to be escalated to the sector DPO(s) e.
.
via a Data Protection Impact Assessment (DPIA).
Communication/Reporting.
Connects on a regular basis with key stakeholders across BU and Functions to understand their current and planned data processing activities and ensure they are clear privacy operational requirements.
Exercises judgement to raise key risk and compliance issues to the DPO and/or Legal and/or the Privacy Councils.
Record of Processing Activities.
Encourage use and adoption of the Global tool to ensure processing activities of the business is properly logged.
Where necessary manages maintenance of a record of all personal data processing activities (i.
.
data inventory).
Data Subject Rights.
Manages the data subject rights request process, partnering with data subject facing functions (Consumer Services, Insights and HR) in continuously endeavoring to improve the management of processes to permit data subjects to exercise their rights of access and deletion (including facilitating records location/extraction/consolidation/deletion) in accordance with agreed legislatively driven SLAs.
CoE Operating Manual.
ensure that the CoE manual is followed, monitored, and maintained.
Where necessary report back any required enhancement to ensure the smooth running of the CoE operations.
Data protection by design.
Supports the business on the embedding of current privacy standards, controls and policies into “Business As Usual” and into overall ways the Business works with third parties who process PEP personal data.
This will involve assisting to formulate, embed and enforce protocols and ways of working with IT system owners across the business to ensure privacy is flagged and addressed in system design as early as possible and prior to PEP onboarding.
Training and Awareness.
supports in the development of a privacy compliance training program.
Promotes privacy awareness throughout the business and ensuring adequate support is granted to the Sector DPOs in the roll out of a regular cadence of communications to keep privacy on the business agenda.
Privacy Councils.
Supports the China DPO to lead quarterly Regional Privacy Councils as part of the PepsiCo global privacy governance framework, ensuring privacy risk/key privacy matters are raised and escalated appropriately and in accordance with PepsiCo’s privacy policies and standards.
Qualifications Key Skills/Experience Required Bachelor level degree (preferably in law or information technology/cyber security and data security) 10+ years’ experience Data, Regulatory Compliance, Audit, Data Privacy experience Commercial and financial acumen Technology.
ERP, Content management, Computer, Business Analysis and Project Management Knowledge of operational management accounting Internal governance and control skills Knowledge of data privacy legislative & regulatory landscape Knowledge of reporting and presentation to various levels of stakeholders including senior level Communication and collaboration skills Writing skills (Strategy Roadmaps, Reports, KPIs, KRIs, Policies and Procedures and Standard Operating Procedures) Research skills 6.
    Differentiating Competencies Required Strong, positive, and professional attitude with highest level of integrity Excellent interpersonal skills, team player, perseverance and determination Strong business and financial acumen Analytical and lateral thinker Values-based leadership approach High energy and self-starter / self-motivated Independent thinker