Data Privacy Officer

About this role

Legal covers commercial contracting, employment, corporate matters, privacy and the regulatory position across every jurisdiction we operate in.

Own privacy across a platform handling candidate data in many jurisdictions: assessments, subject requests, retention and the decisions behind them.

We hold identity documents, salary data and CVs across several data-protection regimes at once, and we sell into organisations whose procurement and security teams will test every claim we make. Advice has to be practical enough to act on and precise enough to survive that.

Primary responsibilities

• Own the privacy programme across GDPR, India's DPDP Act and the other regimes we fall under
• Maintain the record of processing and keep it true rather than tidy
• Run data protection impact assessments for new processing, before it starts
• Handle data subject requests — access, correction, erasure and portability — within the statutory time limits
• Manage the cross-border transfer position, including the mechanisms that make it lawful
• Handle breach assessment and notification to a 72-hour clock
• Train the business, particularly the teams that touch candidate data daily

Skills required

Day to day this role works with Compliance, GDPR and Privacy.

• Five or more years in privacy, with recognised certification
• Five or more years in data protection or privacy
• GDPR and India's DPDP Act applied in practice rather than cited
• Record of processing maintained as a true document
• Data protection impact assessments run before processing starts