Privacy Operation Analyst Technical

Summary of Role

Reporting to the Global Privacy Manager, this role inputs to a team of privacy professionals who provide advice, oversight, and data protection risk management to WTW businesses and functional groups, to ensure appropriate protection of personal information.
Oversee the privacy software used by the Privacy Team OneTrust. This will include:
Oversight of the technical environment of the software solution, including management of SSO, user and privilege access control management, organizational structure, etc.
Input to template designs and outputs that meet compliance with applicable data protection laws and WTW's Enterprise Privacy Framework.
Champion key modules within the software, to become the team's Subject Matter Expert, providing support and guidance to colleagues as required. The modules will include cookies management and data mapping.
Be the point of contact for input to any secondary compliance requirements such as SOC2, SOX, etc.
Develop and maintain documentation that supports the Privacy function's operational processes.
Ensure the escalation and reporting of Privacy related matters in a timely and appropriate manner to Privacy team members.

We are looking for a collaborative team player, with brilliant coordination and communication skills who likes to work in a fast-paced environment. They will contribute to and work as part of a global multi-disciplined privacy and legal community with clear vision and direction, and top-down support across the business.

The Role

1. Provide administrative support for the Privacy function software platform, OneTrust:
a. Review and maintain the WTW organization structure used by the software.
b. Review and maintain the folder structure within the modules, to effectively control access to the relevant data files for users.
c. Provide timely escalation of active tasks to ensure their completion, including but not limited to DPIAs, Notices and Cookie implementations, assessments, etc.
d. Ensure reports are generated for the team, from within the OneTrust environment.
e. Oversight of the technical environment of the software solution, including management of SSO, user and privilege access control management, organizational structure, etc.
f. Input to template designs and outputs that meet compliance with applicable data protection laws and WTW's Enterprise Privacy Framework.
g. Champion key modules within the software, to become the team's Subject Matter Expert, providing support and guidance to colleagues as required. The modules will include cookies management and data mapping.
h. Be the point of contact for input to any secondary compliance requirements such as SOC2, SOX, etc.

2. Provide support in monitoring, managing and triaging Privacy queries and requests, including but not limited to responding to and/or facilitating such queries and requests. This includes working with other relevant stakeholders to achieve the objective.

3. Develop and maintain documentation that supports the Privacy function's operational processes.

4. Supporting projects and initiatives from the Privacy Team.


The Requirements

Demonstrable track record of:
o Demonstrable ability to interpret technical architectures, cyber security standards, etc., and preferably an ability to interpret their application in the context of global data protection laws and regulations.
o Basic understanding of generative AI and a demonstrable ability to provide an assessment for use cases introduced from automation.
o A good understanding of various technologies and their practical use, including Excel (covering csv file uses and macros), Sharepoint, and Microsoft Enterprise level applications such as Purview, Defender, etc.
o Experience logging support issues with software vendors, including tracking of progressing issues through to resolution.

Beneficial but not essential:
o An understanding of Cyber Security
o An understanding of privacy regulations (e.g., GDPR, CCPA and other U.S. and global privacy laws)
Beneficial qualifications include:
o Bachelor's or advanced degree in a relevant field (e.g., information security, or data management).
o Privacy certification(s)