Data Privacy Operations Officer

The GraceKennedy Group seeks to identify an individual looking for an excellent opportunity to progress his/her career; and who possesses the vision and energy to help drive dynamic changes across the group, in the following capacity:-​

DATA PRIVACY OPERATIONS OFFICER

KEY RESPONSIBILITIES

Implementation of Privacy Program:

• Drive the operational implementation of the organization’s privacy framework within business units.
• Ensure business units adopt and maintain practices that align with privacy laws, regulations, and internal policies.
• Work closely with Data Stewards to drive the implementation of privacy measures and ensure compliance with established standards.
• Monitor the execution of privacy measures and escalate gaps or issues to the Privacy Office.
• Collaborate with business units to embed privacy by design into processes, systems and products.

Stakeholder Collaboration:

• Act as the Privacy Office’s liaison with business units on privacy-related matters.
• Partner with Data Stewards and departments to integrate privacy requirements into their processes, tools, and workflows.
• Collaborate with the Privacy Program Analyst to align strategic initiatives with operational implementation.

Privacy Risk Management:

• Oversee the execution of Data Protection Impact Assessments (DPIAs) and support business units in implementing mitigation plans and tracking progress.
• Monitor and report on risks associated with data processing activities.

Training and Awareness:

• Develop and deliver tailored privacy training to business unit teams.
• Promote awareness of privacy responsibilities and encourage a culture of compliance within the organization.

Monitoring and Reporting:

• Track and report on the status of privacy program implementation across business units.
• Provide detailed metrics, dashboards, and updates to the Privacy Office on compliance progress and challenges.
• Monitor the effectiveness of privacy measures and recommend improvements as needed.

Privacy-Related Incidents and Requests:

• Support the management of privacy incidents and data subject access requests.
• Collaborate with Data Stewards, IT and Legal to ensure timely investigation, resolution, and documentation of incidents.
• Assist in identifying root causes and recommending corrective actions to prevent future incidents.

Privacy Audits and Compliance Monitoring:

• Conduct internal privacy audits within business units to monitor compliance with privacy policies, standards, and regulations.
• Document findings, prepare reports, and work with business units to remediate identified gaps.
• Collaborate with the Privacy Program Analyst to provide insights from audits for refining the privacy program.

Support for Audits and Assessments:

• Assist business units in preparing for internal and external privacy audits.
• Ensure documentation and evidence are readily available for audit purposes.

Continuous Improvement:

• Provide feedback to the Privacy Office on operational challenges and opportunities for enhancing the privacy program.

• Support the development of privacy resources, tools, and templates for business units.

REQUIRED QUALIFICATION, EXPERIENCE, KNOWLEDGE, AND SKILLS

• Proven ability to coordinate initiatives, track milestones, and meet deadlines.
• Understanding of how to embed policies into business processes and workflows.
• Strong interpersonal skills to engage effectively with stakeholders at all levels.
• Ability to assess challenges, propose solutions, and manage implementation risks.
• Skilled at gathering and synthesising data to support compliance activities.
• Exhibits resilience, ability to quickly implement strategy, and effectively gathers and mobilises resources.
• Meticulous approach to monitoring compliance activities and preparing documentation.
• Proficient in using office productivity tools (e.g., Excel, PowerPoint, SharePoint) for documentation and reporting.
• Familiarity with compliance or data protection tools is a plus.
• Bachelor’s degree in business, law, information technology or a related field
• CIPM, CIPP/E, CIPP/US or similar privacy certifications preferred
• Project management certification (e.g., PMP) desirable
• Three (3) years of experience in data privacy, compliance, risk, or related operational roles.
• Experience implementing policies or programs in a business environment is strongly preferred.

​Qualified applicants are invited to submit applications no later than 21/04/2025 via the careers section of our Corporate Website at www.gracekennedy.com

GraceKennedy upholds the principles of fairness and equity in the treatment of all our employees and stakeholders. The Company is committed to equity in all its employment practices and policies and seeks to recruit, develop and retain its employees on the basis of merit, ability and performance. As such, we are committed to ensuring equal opportunity in employment, and will not discriminate on the grounds of race, national origin, religion, gender, or otherwise.