Data Privacy and Protection

Job description

Job description

This resource will support the Americas regions by leading with below responsibilities: Designing, Developing, Maintaining and Executing the Data Privacy control monitoring plan; Working with stakeholders in GB/ GFs, Chief Privacy Officer, Legal,  second and third lines of defense as needed to ensure Data privacy controls are executed as documented. Reporting in Data Privacy control KCIs/ KPIs and metrics in the required governance forums – working group and Data & Analytics steering committee; Provide reporting of privacy impact assessments using Data Visa along with required escalations; Provide oversight on other data privacy aspects such as privacy notices, individual consent notices and address Data Privacy risk matters applicable to Americas.

Requirements

Description: 

·     Oversee and manage data shared service units or support teams.

·     Support HSBC businesses on data matters which include data privacy.

·     Manage the identification of strategic and operational improvements in data privacy.

·     Develop, manage and maintain data privacy standards, policies and methodologies e.g. Data Sharing Controls, Sharing Agreement Inventory, Data Sharing and Privacy Policy, Data Ethics Privacy Principles

·     Support and participate in efforts to ensure data privacy practices in HSBC help support business decision making.

·     Perform privacy assessments of operational processes, identifying, and mitigating risks across the company through effective tools, training and guidance.

·     Support the development and delivery of data privacy controls based on data policies that assure the compliant use of data and information globally.

·     Embed Data Privacy Controls across Canada, US and LAM

·     Monitor and advise on Key Control Indicators and other MI used to analyse the likelihood and severity of Data Privacy risks.

·     Act as a role model on data privacy laws, working collaboratively with Legal Data Privacy and Regulatory Compliance to communicate on data risk policies.

Provide support and subject matter expertise to Data Protection Officers, Group Data Privacy Legal teams and Group Data Services and others relating to data privacy risks and issues