Data Privacy Analyst

The EAP PO Privacy is part of the Global Compliance department and has a mandate for

promoting a culture of privacy compliance and oversees the firms privacy practices and initiatives

regarding customer and employee information.

The EAP PO has oversight of privacy risk in Europe and Asia-Pacific. It provides specialized advice

and counsel to Risk Owners (businesses and corporate functions), reports and escalates privacy

issues of key importance within the firm and provides training and acts as a primary point of contact for

local privacy regulators.

As second line of defense Oversight Function, the EAP PO along with other risk and oversight

partners provide objective guidance, independent challenge and risk-based oversight of the firm

compliance with Europe and Asia-Pacific privacy laws, rules and regulations.

Job Description This role reports to the EAP PO Privacy Manager and supports various activities within Privacy.

Key accountabilities include:

• Perform reviews of Privacy Impact Assessments, Legitimate Interest Assessments,

Transfer Impact Assessments, Third Party Control Assessments and works with

businesses to review and challenge control and mitigation measures.

• Manage data privacy breaches and incidents and assist with data subject rights

requests.

• Manage annual review of Records of Processing Activities and the associated Annual

Attestation process, including for purposes of Article 30 of the GDPR.

• Maintain privacy issues log and other tracking and record-keeping documentation for

the EAP Region.

• Maintain privacy-related risk assessments, metrics and reporting mechanisms to

assess the health of the privacy program.

• Remain current on applicable legislation and regulation across the region.

• Support regulatory change activities.

• Assist in maintaining internal privacy policies and notices.

• Support training and awareness program to promote compliance.

• Conduct and/or participate in regional monitoring and testing activities as required.

• Escalate issues as appropriate.

• Support special projects and strategic initiatives as assigned.