The Assistant Privacy, Risk & Compliance Officer is responsible for providing operational and administrative support to the PRCO in executing global privacy, risk, and compliance programs at the country level. The role assists in maintaining accurate records, gathering evidence for audits, tracking vendor risks, and monitoring compliance controls. This position is crucial for ensuring that the subsidiary remains audit-ready and that the day-to-day compliance framework is effectively maintained.
Key Responsibilities and Accountabilities
Records Management: Assist the PRCO in maintaining the accuracy, completeness, and ongoing update of Records of Processing (RoPAs) for both controller and processor activities in OneTrust.
Audit & Evidence Support: Gather, organize, and upload evidence for internal and external privacy audits into the relevant compliance tools (e.g., OneTrust, GCT). Track action plan progress and follow up with internal departments to ensure timely submission.
Vendor & Third-Party Risk: Support vendor due diligence by coordinating the collection of DPAs, security assessments, and contract clauses from procurement and legal teams.
Control Monitoring: Monitor the completion of mandatory privacy controls, such as policy communications, training completion, and consent tracking.
Incident Support: Assist in the logging, assessment, and escalation of potential data breaches, under the direction of the PRCO.
Policy & Communication Support: Help coordinate the dissemination of privacy notices, internal guidelines, and awareness communications to the workforce.
Reporting: Compile data and prepare basic reports on compliance metrics, risk register updates, and audit status for the PRCO's review.
Education and Specific Training
Bachelor’s degree or equivalent experience
Privacy Background or Specialization
Work Experience
1-3 years of experience managing privacy and compliance programs within a large corporation.
Special Certifications
Certification(s) from an accredited institution for privacy and compliance
Required Skills
English language fluency (speaking, reading, writing)
Knowledge of data privacy laws and frameworks (e.g., GDPR, CCPA/CPRA)
Experience with risk management, controls, and assessments
Proficiency in GRC/privacy tools (e.g., OneTrust) and data/reporting analysis
Understanding of vendor risk and privacy in contracts (DPAs, SCCs)
Bachelor’s degree or equivalent experience
Privacy certification (e.g., CIPP/CIPM) or ability to obtain quickly
Proficiency in Microsoft Office (Excel, PowerPoint)
Experience with GRC tools, audits, and compliance reporting
Experience in privacy, risk, or compliance roles
Strong analytical thinking and problem-solving
Effective communication and stakeholder influence
High integrity, organization, and project management