Job Description

Key purpose:

Support the company on implementing and integrating data governance & privacy practices, in line with regulatory requirements, across the Group to enhance privacy maturity, and ensure compliance with privacy laws and regulations when processing personal information.

Duties and responsibilities:

• IT Privacy Assessments
• Conduct and maintain privacy processes including data protection impact assessments (DPIA) and Data Processing Assessments (DPA)
• IT Privacy Policies and Procedures
• Help mature policies, processes, and procedures to manage data processing (e.g., purpose, scope, roles, and responsibilities) consistent with Ardaghs risk strategy, to protect personal and sensitive data.
• Personal Data Governance
• Implement and integrate data privacy and governance practices across Ardagh to address regulatory compliance and protect sensitive information.
• Third Party Privacy Assessment
• Assess privacy posture of new vendors and detail associated privacy risks
• Support business on details Data Processing Agreements
• GAP analysis of technical and organizational measures (TOMS)
• Audit clause reviews
• Sub processor risk analysis
• Policy & Procedure Management
• Assist in the review and maintenance of the repository of IT policies and procedures. Ensure IT policies and procedures are updated as and when required, while ensuring privacy impacts are considered.
• To conduct and facilitate reviews of IT privacy controls based on standard methodologies and an understanding of technical infrastructure, IT & privacy risk and cyber security.
• Facilitate reviews of IT risk compliance work programs with technical teams.
• Cross competency collaboration
• Work with Legal Compliance on privacy matters relating to personal data processing.
• Assist with the ongoing monitoring of the IT Compliance Programs
• Ongoing Monitoring of compliance to IT control & security requirements for designated systems
• Assist with the review and monitoring of the IT privacy risk assessments & reviews.
• Assist with IT privacy risk assessments and reviews people systems.