Trusting Social ★ 3.7

What you will do
The Data Privacy Specialist, part of the Information Security & Data Privacy department, reviews company services and products to identify and address PII protection and privacy issues. They help execute and improve Trusting Social's privacy program, consult on privacy matters, and develop, implement, and maintain policy and procedural documentation. This role coordinates with IT Compliance & Audit, SRE, Legal, HR, Business & Sales, Engineering, and other areas to ensure effective implementation of PII protection and privacy requirements, promoting compliance objectives. Specifically, you will:
● Conduct risk assessments and collaborate with stakeholders to mitigate PII protection and privacy risks.
● Support Business Units in maintaining accurate records and processes for PII compliance.
● Manage PII protection and privacy governance activities, including Privacy by Design, Data Mapping, and Data Privacy Impact Assessments.
● Advise the company, service providers, and employees on data protection obligations.
● Create and update policies, standards, and procedures to align with international laws, data security management standards (e.g. ISO 27701, PCI-DSS, NIST) and business contracts.
● Ensure compliance with data protection policies and regulations by working closely with project teams and IT.
● Collaborate with IT GRC for intensive PII compliance audits and action on findings.
● Develop and present training materials for the PII protection and privacy program.
● Monitor industry trends and emerging threats to stay updated on PII protection and privacy best practices.

What you need to have
● Bachelor's Degree in Information Security or related IT field.
● 3+ years of demonstrated experience in Information Technology/Security, Governance, Risk, Compliance (GRC) and Privacy domains.
● Experience in one of any privacy management standards or frameworks such as NIST Privacy Framework, ISO 27701, PCI-DSS.
● Good communication skills, including the ability to liaise with people across the business.
● Strong experience in privacy risk assessment, SOPs, documents, reports and templates development and management.
● Strong experience in PII protection & DLP solutions.
● Basic knowledge on Native clouds, API, Infra as a Code and Container technology.
● Privacy certification (such as CIPP/CIPM/CIPT or similar) is strongly preferred.

Chăm sóc sức khoẻ
Health insurance package for the whole family, free food at the office, Grab for Work allowance
Máy tính xách tay
Be part of a winning team with exponential growth regionally, recruiting world-class talent
Khác
Opportunity to work and learn from one of the best and brightest technology teams in Vietnam