About Us:
Tsaaro is dedicated to Data Privacy and Security as its core focus. Our team comprises specialized data privacy consultants, information security experts, and penetration testers, all working to empower our clients with seamless and highly efficient security solutions. Our approach is centered around customization, understanding the unique needs of each organization, and finding solutions that align with their budget and resource constraints.
At Tsaaro, we adopt a pragmatic, risk-based strategy to deliver practical and effective advice. By providing real-world guidance, support, and actionable recommendations, we confidently equip our clients to address a broad spectrum of security and privacy challenges.
Position Overview:
We are seeking an accomplished and highly experienced Senior Data Privacy Consultant (Sr. DPC) to join our team. The ideal candidate will play a pivotal role in the ongoing management and enhancement of our Privacy Information Management System (PIMS), ensuring stringent compliance with privacy regulations and driving the successful implementation of privacy tools.
Key Responsibilities:Privacy Gaps:
- PIMS Sustenance:
- Records of Processing Activities (RoPA): Review and update RoPA documentation for all business units (BUs) to maintain accuracy and compliance.
- Internal Audits: Conduct comprehensive PIMS internal audits across all BUs.
- Privacy Impact Assessments (PIAs): Review existing PIAs and conduct new PIAs for all BUs to identify and mitigate privacy risks.
- Continuously identify gaps in current and future systems and ensure the implementation of recommended solutions.
- Track and close findings from previous gap assessments and PIAs.
- Privacy Awareness: Drive privacy awareness activities with relevant stakeholders.
- Privacy Assistance:
- Identify, publish, and implement privacy recommendations for products based on geographical requirements.
- Assist internal stakeholders with privacy-related queries.
- Collaborate with internal teams to perform privacy operations efficiently.
- Privacy Tool Implementation:
Drive all phases of privacy tool implementation, including:
- Coordination with stakeholders from legal, product, engineering, compliance, service, and other relevant departments.
- Implementation of data discovery solutions.
- Integration of consent management, including cookie consent on websites.
- Establishment of Data Subject Request (DSR) workflows.
- Updating and publishing privacy notices.
- Conducting testing and training:
- Test the implementation setup.
- Train stakeholders on new privacy processes.
- Managing incidents and breaches.
- Ensuring compliance with ISO 27701 and GDPR/DPDPA standards.
Requirements
Qualifications:
- Bachelor's degree in Information Technology, Law, Business Administration, or a related field.
- Minimum of 4 years of experience in data privacy, information security, or compliance, preferably within the fintech domain.
- In-depth knowledge of GDPR, DPDPA, and ISO 27701 compliance requirements.
- Excellent communication, organizational, and stakeholder management skills.
- Proven ability to conduct audits, assessments, and implement privacy solutions.
Benefits
- Competitive salary and performance-based bonuses.
- Professional development opportunities, including training and certifications.
- Flexible working hours and remote work options.
- Collaborative and inclusive work environment.
- Opportunity to work with a passionate team dedicated to making a difference in data privacy and security.
