Data Privacy Specialist at NTT Ltd in Johannesburg, South Africa

Your day at NTT DATA

The Data Privacy Specialist reporting to the NTT DATA, Inc. Global Data Privacy Center of Excellence will be responsible for the effective implementation and oversight of the data privacy program in the NTT DATA Global Practice Portfolios.

The Data Privacy Specialist will work closely with stakeholders across the Global Practice portfolios to ensure that appropriate controls across people, process, and technology are put in place to support compliance with data protection laws and regulations, industry standards and NTT DATA, Inc. Group’s global Data Privacy policies, standards and procedures.

What are the NTT DATA Global Practices?

Within NTT DATA, the Global Practices is the division which is responsible for the development and delivery of NTT DATA’s products and services.

Key Responsibilities:

The Global Practices Portfolio Specialists will work within the Global Practices Privacy team and with the Global Practice portfolio(s) in order to:

• Act as a key point of contact on data privacy matters within Global Practices portfolios.
• Embed NTT DATA, Inc. Group’s Data Privacy policies, procedures, and standards in the regions by working closely with stakeholders from across the Global Practices portfolios and awareness raising.
• Review NTT DATA, Inc. Group’s Data Privacy policies, procedures and standards to ensure that these meet business and legal requirements for data privacy within Global Practices portfolios. Where required, define and document local variations and/or translations to NTT DATA, Inc. Group’s Data Privacy policies, procedures and standards to ensure compliance with local data protection laws and regulations.
• Implement appropriate controls to support and enforce the principles of data privacy by default and by design in our business processes, applications, systems, databases, and products, services and solutions.
• Manage the roll-out and implementation of Data Privacy requirements of new initiatives/projects from the NTT DATA, Inc. Group Global Data Privacy Center of Excellence.
• Work with stakeholders in the business to ensure that the record of processing (including data flows and cross-border data transfers) is documented, accurate, complete, and up to date for all processing activities.
• Work with stakeholders in the business to ensure that the organization has documented clear, specific and accessible privacy notices to inform individuals of the processing of their personal data in accordance with applicable laws and regulations.
• Perform privacy assessments of NTT DATA products and services to ensure that Data Privacy by Design principles and compliance requirements are embedded within client product and service offerings. This includes providing technical advice on privacy control design and implementation, as well as supporting the creation of go-to-market collateral to support bid and sales processes.
• Support and advise the business in its response to RFPs and client questionnaires in respect of the organization’s Data Privacy program, Information Security and Privacy Management System (ISPMS), and Data Privacy controls.
• Support the performance of third-party information security and privacy assessments to ensure that third parties have appropriate controls in place to comply with applicable data protection laws and regulations and NTT DATA, Inc. Group’s Data Privacy policies. This may include periodic third-party audits or assessments.
• Support legal teams in the negotiation of data processing and sharing agreements with third parties and ensure a third-party register is maintained of all third parties who process personal data on the organization’s behalf.
• Support escalated data subject requests in accordance with applicable data protection laws and regulations and NTT DATA, Inc. Group’s Data Privacy policies and processes.
• Support the response to Data Privacy Incidents in Global Practices portfolios by working with the Data Privacy Incident Manager in accordance with applicable data protection laws and regulations and NTT DATA, Inc. Group’s Data Privacy and Data Privacy Incident Response policies and procedures.
• Respond to any queries, audits or investigations from data protection authorities in consultation with the NTT DATA, Inc. Group Global Data Privacy Center of Excellence and relevant Data Protection Officer.
• Consult and work together with the relevant Data Protection Officer’s to ensure that the organization meets its data privacy obligations.
• Document and assess Data Privacy risks in the business and develop strategies to manage or mitigate them.
• Monitor and report on the implementation and effectiveness of Data Privacy controls across the business, including Data Privacy risks, on a periodic basis.
• Monitor developments in data protection laws and regulations in the region, understand the impact for the organization, advise the business and recommend appropriate mechanisms and controls to support ongoing compliance.
• Document and maintain compliance risk management plans for applicable data protection laws and regulations.
• Monitor and enforce completion of mandatory Data Privacy compliance training in the business and develop and provide dedicated training to the business where training needs or gaps arise.
• Maintain your technical expertise by keeping abreast of developments in Data Privacy, participating in Data Privacy manager training and relevant industry forums and undertaking continual training and development.

Knowledge and Attributes:

• Demonstrates accuracy, thoroughness, and high levels of attention to detail.
• Demonstrates strong analytical skills, including the ability to assess risk and impact from a data privacy and protection perspective.
• Demonstrates a pragmatic and risk-based approach to data privacy and protection.
• Excellent written and verbal communication skills.
• Ability to thrive under pressure, function and deliver effectively in a fast-paced environment.
• Proactive approach with high levels of motivation, being a self-starter with good planning and organizing skills.
• Ability to work well in a collaborative and multi-disciplinary team environment.
• Strong organizational and project management skills, including the ability to manage competing tasks and prioritize effectively.
• Strong stakeholder management skills.
• Firm grasp of data privacy and protection concerns, best practices, and industry standards.
• Broad knowledge of data protection laws and regulations that apply to the organization and how to implement these.
• Operates with a high degree of integrity.

Academic Qualifications and Certifications:

• Bachelor’s degree or appropriate qualification
• CIPP, CIPM, CIPT, AIGP and/or CDPSE (preferred)

Required experience:

• 3+ years’ relevant work experience in data privacy program management, processes, practices, technologies, risk management, audit, and/or compliance.
• Experience in responding to data subject rights requests and personal data breaches.
• Experience in advising on complex data privacy matters with practical advice.
• Experience in risk management activities and practices (preferred).
• Experience in working on compliance projects.
• Experience in telecommunications, technology and/or professional services (preferred).
• Experience in or working with cybersecurity functions is desirable.