Data Protection Officer

As the Data Protection Officer (DPO) at our organization, your primary responsibility is to monitor compliance with Data Protection and Privacy Policy. You will work under the directions of the Chief Compliance and Security Officer to develop and review the Data Protection Policy. This includes liaising with the IT department to collect Data Leakage Prevention (DLP) reports and analyzing them to ensure data processors handle data in alignment with key data protection principles. You will be tasked with identifying and monitoring potential data breaches, investigating anomalies, and coordinating with relevant stakeholders to mitigate risks. In addition, you will advise the Head of Information Security on the provisions of the Data Protection Act and build awareness of data privacy issues throughout the organization. Your role requires excellent communication and presentation skills to effectively convey information on privacy and data protection laws applicable to our company, Nayara Energy. You will be responsible for implementing the Data Protection Policy across the enterprise, setting up processes to monitor compliance, and providing compliance reports to top management. Furthermore, you will offer guidance to delivery and support functions on the processing of personal data. This includes conducting assessments, reviewing processes, identifying gaps, suggesting mitigation strategies, and following up on the closure of identified gaps. You will also maintain data flow maps for processes involving personal data and undertake data protection and privacy compliance audits as required. As part of your role, you will stay updated on changes in relevant legislations related to Privacy and Data Protection Acts, translating these requirements into controls and providing guidance to all stakeholders. Additionally, you will develop and update a comprehensive privacy awareness training program to promote awareness across the company. Overall, as the DPO, you play a crucial role in ensuring data protection and privacy compliance within the organization, driving awareness, implementing policies, and monitoring processes to safeguard personal data.,