Organize routine training sessions for specific business groups and/or new joiners on data protection laws, regulations, guidelines, and data processing contractual and consent obligation requirements. This may include preparation of the training materials and tracking trainees attendance.
Solid understanding of cloud and Kubernetes environments, including multi-tenant isolation, data flows, and integration with security tooling; with demonstrated ownership of at least one end-to-end privacy or GDPR/DPA compliance implementation.
Accountable for advising faculties, professional units, and other stakeholders on the legality and operational feasibility of products, systems, and programmes; handling information requests from authorities and third parties lawfully and proportionately; embedding privacy-by-design into new systems and services; and delivering privacy awareness and training across the University.
Work with business units to evaluate, implement and monitor internal personal data protection compliance policies, procedures, controls and/or remediation measures, as may be needed from time to time;
Draft and negotiate Data Protection Agreements (DPAs), Standard Contractual Clauses (SCCs) and outsourcing terms, aligning GDPR Art. 28, MiCAR Art. 73 and DORA Art. 30(3) obligations into one package
Work with relevant departments/functions to build up and/or implement controls and provide quality and solutions-focused advice on data protection and privacy risk and control issues relevant to the business units for informed decision-making.
Supporting fintech and regulatory matters involving financial technology, digital assets, payments, lending, blockchain, tokenisation and other emerging technology models.