• Craft, update, and enforce data protection policies and procedures to ensure compliance with GDPR and other data protection laws.

• Regularly assess company activities and systems for compliance with data protection regulations and conduct periodic internal audits.

• Serve as the subject matter expert on data protection laws and regulations, offering advice and guidance to the organization on related matters.

• Design and deliver training programs to educate employees about compliance, data protection best practices, and their responsibilities concerning data handling.

• Perform Data Protection Impact Assessments (DPIAs) and other risk assessments, identifying potential risks and advising on mitigating strategies.

• Lead the response to data protection incidents, including data breaches, from detection through to resolution, and coordinate with authorities, as necessary.

• Act as the primary contact point for communication with data protection authorities and other regulatory bodies.

• Keep detailed records of all data processing activities, ensuring they are easily accessible and compliant with regulatory requirements.

• Raise awareness and foster a data protection culture within the organization through ongoing communication and engagement.

• Manage and respond to requests from data subjects to exercise their rights under data protection laws (e.g., access, rectification, deletion of personal data).

Qualifications:

• Thorough understanding of data protection laws (like the GDPR, CCPA, HIPAA, etc.) and their implications with the FMCG Industry.

• Familiarity with IT infrastructure, cloud computing, databases, and data processing operations.

• Understanding of information security standards, such as ISO 27001, and cybersecurity best practices to protect data against breaches.

• Knowledge of encryption and anonymization techniques, and methods to secure data, such as encryption, hashing, and tokenization.

• Understanding of the data lifecycle, from creation and storage to transfer, access, and deletion.

• Knowledge of data architecture and how data is organized and utilized within the organization, including data flows and data classification.

• Ability to conduct Data Protection Impact Assessments (DPIAs) and audits to identify and mitigate risks.

• Knowledge of technologies designed to minimize personal data use and maximize data protection.

• BSc/BA in computer science, engineering, or relevant field; MSc/MA will be a plus.

• Certified Information Systems Security Professional (CISSP)