Manager- Privacy and Compliance

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Creation and implementation of GTA policies and standard operating procedures.
• Monitoring and interpretation of Privacy regulations, laws and legal developments globally to create compliance approaches, policies, notices and procedures.
• Serves as primary Privacy contact for GTA’s INDUS operation to oversee compliance including lawful management of consent operations, data principal rights management, cross border data transfer documentation and contracts.
• Creation and update of Records of Processing Activities (ROPAs) for both INDUS and global privacy operations.
• Ensure that GTA incident reporting policy is implemented in the INDUS operation and assist in implementation of technologies supporting incident reporting and processing globally.
• OneTrust support that includes administrator level capabilities: specifically configuration of OneTrust templates, workfows, reporting, dashboards and modules (Privacy, AI and risk) as well as the ability to support the onboarding of subsidiaries and affiliates into OneTrust, including but not limited to ingestion of data.
• Conducting Data Protection Impact Assessments (DPIA) for INDUS and global privacy operations.
• Coordinating and attending meetings, emailing internal contacts for information as directed.
• Supporting Privacy review of products and services, creating review templates and identifying areas for more effective review.
• Consolidate requirements of, enforce and audit against privacy frameworks like DCPP, GDPR, CCPA, NIST, ISO (27001, 27559, 29100, 27701, 27559, DORA, EU AI Act, EU-US DPF)
• · Support data subject access request intake and fulfillment for INDUS and global operations.
• · Assist in preparation of presentations and targeted training materials.
• · Identify and manage Privacy risks.
• · Maintain and create as needed, Privacy KPIs.
• · Handle or resolve Privacy matters as directed by Privacy Director.