Job description: Privacy Operation Manager
Job overview:
The privacy business analyst will serve as the liaison between the Rakuten business departments and the global privacy office team. This person will be responsible for identifying, analyzing, validating, specifying, verifying, and managing the business needs of Rakuten's internal privacy framework, including Binding Corporate Rules (BCRs) and the General Data Protection Regulation (GDPR). The successful candidate will work closely with business units, technical experts and the global privacy office team to identify business needs, define projects, develop privacy requirements and manage the implementation effort to completion.
Responsibilities:
- Implement privacy requirements and operation in Rakuten India.
- Identify potential implementation and operational issues using interviews, document analysis, surveys, site visits, business process descriptions, use cases, scenarios, business analysis, competitive product analysis, task and workflow analysis, and/or requirements workshops.
- Ability to communicate (verbal and written) with business units that rely on that information to define system requirements or organizational processes.
- Collect and analyze Rakuten Indias requirements and transfer the same knowledge to the privacy team.
- Effectively communicate privacy terminology to company management and stakeholders.
- Review and/or prepare compliance documentation and specifications in accordance with Rakuten's privacy framework.
- Suggests areas for improvement in internal processes along with possible solutions.
- Facilitate requirements prioritization based on business value and associated compliance risks.
- Track requirements status throughout the project.
- Manage changes to requirements through effective use of change control processes and tools.
- Assist in enforcement of project deadlines, schedules, and methodologies.
Qualifications:
- Ability to organize and structure different requirements and projects in an effective manner.
- The ability to think analytically, solve problems to complex business processes, and document results.
- The ability to communicate complex ideas in a clear, concise manner across functional and technical departments.
- A good understanding of the global privacy regulatory landscape, including the European General Data Protection Regulation
- Work on multiple tasks at any time while maintaining high quality standards.
- The candidate must be process-oriented with sound judgment, attention to detail, accuracy, and follow-through including the flexibility to perform in an ever-changing work environment.
- The candidate must be energetic, driven and committed to project success while working under time constraints.
- Advanced knowledge and experience using Microsoft Office, JIRA, Sharepoint or similar tools.
- Advanced knowledge and experience in information technology, focus on information security and data analysis preferred
- Fluent in English
Requirements:
- Bachelor's or Masters Degree in IT, Law or relevant field that demonstrates your interest in the data protection and privacy domain.
- 5+ years of legal experience (though more experience is welcome), including supporting and advising businesses on privacy and data protection related concerns, ideally with both a law firm and / or within a fast-paced technology, or Internet company.
- Possession of relevant qualifications such as CIPM, CIPT, CIPP, CISM, CISSP, as well as involvement in industry related organizations (e.g. IAPP, ISACA, (ISC)) are desirable.
- Experience with privacy and data protection compliance processes and practices.
- Knowledge of global privacy standards and regimes including but not limited to CCPA, GDPR, Indian Privacy Law(upcoming) as well as tech industry self-regulatory guidelines.
- Comfortable working in a company experiencing rapid growth.
