Privacy Officer

**Our Organization**
Do you believe businesses should have a bigger ambition than short term profit? If you do, join DLL’s mission to ‘get the right tools into the right hands. You’ll be part of a team that understands the heart and soul of our partners’ business. A team that provides original financial solutions to sustain success for generations.
**Your Function**:
As the **Region South Privacy Officer**, you will lead the first line of responsibility on all privacy related matters ensure DLL acts in compliance with regulation, thereby building stakeholder trust in DLL’s ability to gather, process and retain data.

**Fundamental Responsibilities**:

- Together with Legal, Compliance and the Global Privacy Office provide leadership and drive the vision and strategy for all matters relating to Europe South privacy framework with the business, including local privacy laws/the DLL Global Privacy Office Policy Framework.
- In cooperation with the Global Privacy Office direct, oversee and coordinate privacy programs with senior executives to ensure consistency across DLL.
- Manage and update the local Europe South **Record of Processing Activity (ROPA)** in the global privacy management system (One Trust) working in consultation with the Global Privacy Office, Head of Legal, Head of Operations, Head of Compliance, and assisting Country Sales & Commercial leads and other senior management members to ensure both existing and new services, products or processes comply with privacy obligations.
- Responsible for monitoring changes to privacy legislation, and implementing such changes to the privacy policies, statements and practices across Region South Europe.
- Provide support and advice in adherence to the Global Records Management Policy and Records Retention Schedule in coordination with organization management and administration and legal counsel.
- Ensure global privacy training is undertaken and provide training, advice and guidance to all departments regarding privacy-related regulatory and best practice requirements.
- Participate as the lead in regulatory examinations and internal audits relating to privacy in consultation with the Global Privacy Office.
- Following the Global Privacy Framework for **Privacy by Design** embed such into business practices and recommend enhancements to IT systems including undertaking Legitimate Interest Assessments, Transfer Impact Assessments, Pre-Data Privacy Impact Assessments and Data Privacy Impact Assessments in the global privacy management system (OneTrust).
- Follow the process in the global privacy management system (One Trust) for receiving, documenting, tracking, investigating and taking action on all requests concerning DLL’s privacy policies and procedures.
- Periodically review the Global Privacy Framework, Privacy Notices and privacy processes in light of changes in laws, regulatory or company policy and feed into the global review cycle.
- Coordinate with Global Information Security in creating and maintaining a data mapping program.
- Coordinate with Compliance regarding procedures for documenting and reporting self-disclosures of any evidence of privacy violations.
- Establish a process for privacy and data control assessments and embedding privacy by design into business.

**Your Profile**:
Competencies**:

- Critical Reasoning
- Information Gathering and Analysis
- Research
- Relationship Building
- Communication
- Collaborative Skills
- Impact and Influence
- Initiative
- Conceptual Thinking
- Sound Business Judgment
- Self-reliant in approach and execution of compliance activities.

**Education and other credentials**:

- A Bachelor’s degree in law/business preferred but not required.
- Additional certifications in privacy, information security, information management, information technology, business, or related field would be an added advantage.
- Certified Information Privacy Professional (CIPP) certification or equivalent qualification in Privacy (Desirable).

**Experience**:

- 3-5 Years of experience demonstrating an understanding of data privacy and data handling or at least 8 years of leadership experience with a focus on privacy compliance.
- Significant management experience
- Experience performing privacy and/or security gap assessments
- Experience in data collection, analysis, trending, and reporting
- Experience performing privacy and/or security gap assessments
- Experience drafting and implementing policies, procedures, and processes into an international organization
- Experience in the financial services industry, with specific experience in equipment leasing and vendor finance (preferred)

**Technical/Functional skills and knowledge**:

- Knowledge of GDPR and local Privacy Regulations.
- Ability to take responsibility and be proactive on new matters and projects.

**Physical Requirements and Working Conditions**:

- Regular office work with extensive use of the computer and telephone.
- Some national and internationa