Privacy Operation Specialist

Lenovo Inc.; Ciudad de México; Sur place; MXN 600 000 - 900 000; Plein temps

Résumé du poste

Lenovo is seeking a Privacy Operation Specialist to support privacy and cybersecurity compliance across Latin America, with emphasis on Mexico. You will coordinate DSRs, contract reviews, DPIAs, and broader privacy operations, collaborating with senior counsel and cross-functional teams to ensure timely, compliant responses.

Approximately 30% of the role involves cybersecurity matters, engaging with technical teams, risk assessments, and incident response.

Qualifications

• Must have a law degree with strong privacy compliance background.
• Knowledge of Mexican personal data protection laws and cross-border data transfers.
• Experience with information security and incident management in privacy programs.

Responsabilités

• Serve as SME for privacy operations impacting Mexico and LATAM.
• Review DSRs, data flows, processing records, and privacy controls.
• Collaborate with privacy counsel to handle complex cases.
• Support internal teams on privacy, data protection, and cybersecurity.
• Provide guidance on Mexican data protection laws and regional/global frameworks.
• Review contracts, privacy notices, and processing documents.
• Manage privacy tools like OneTrust (configurations, workflows, reporting).
• Coordinate with security teams on incidents, breaches, and cyber risks.
• Monitor regulatory trends and best practices in privacy and AI.
• Prepare privacy metrics and dashboards for stakeholders.
• Participate in cross-regional working groups on best practices.

Connaissances

Law degree

Privacy compliance

Information security

Incident management

Cross-functional collaboration

Fluent English

Formation

Law degree

Outils

OneTrust

Description du poste

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com , and read about the latest news via our StoryHub .

Description and Requirements

About the Position

We are seeking aa Privacy Operation Specialistin our global Privacy team to support privacy and cybersecurity compliance across Latin America while contributing to global privacy operations. This role is responsible for the end‑to‑end coordination and operational management of Data Subject Requests (DSRs) across the organization, contract review, data privacy impact assessments and broader privacy operations management support. You will work closely with senior privacy counsel, data owners, and cross‑functional teams to ensure timely, compliant, and high‑quality responses.

The candidate must have either legal, cybersecurity or technical background and some prior exposure to privacy and data protection , strong communication skills with business and product teams, and familiarity with information security issues. Approximately 30% of the role will be dedicated to cybersecurity-related matters, requiring sufficient knowledge to interact with technical teams, assess legal and regulatory risks, and support incident response.

At times this role may also be partnering with the global operation lead on global projects, such as implementation of global privacy tools and optimization of review processes.

Key Responsibilities

• Serve as the subject matter expert (SME) for privacy operations and initiatives with an impact in Mexico and the broader Latin America region.
• Review data protection documents, impact assessments, privacy questionnaires, data flows, regulatory risks and mitigation measures, data subject requests (DSRs), processing records, training programs, internal policies, and privacy compliance controls.
• Collaborate closely with privacy counsel to elevate complex cases, validate legal interpretations, and ensure appropriate handling of sensitive requests.
• Support internal departments on issues related to privacy, personal data protection, and cybersecurity.
• Provide guidance on the practical application of Mexican personal data protection legislation and, when necessary, applicable regional and global frameworks.
• Review contractual clauses, privacy terms, internal policies, privacy notices, and documents related to the processing of personal data.
• Manage and maintain privacy tools such as Onetrust, including configurations, workflows, and reporting.
• Collaborate with information security teams on security incidents, data breaches, technical controls, vulnerability management, cyber risks, and related regulatory requirements, to make sure projects/tasks are on track and well documented.
• Monitor regulatory trends and best practices in privacy, data protection, AI, information security, and technology.
• Prepare and present privacy metrics and dashboards to stakeholders and leadership.
• Participate in cross-regional working groups to align on best practices, tools, and enforcement standards.

Requirements

• A law degree
• At least five years of experience in privacy compliance, either at a prestigious law firm or within the legal or compliance function of a multinational corporation.
• Knowledge of Mexican personal data protection legislation, including obligations related to privacy notices, consent, data subjects’ rights, data transfers, security measures, and incident management.
• Practical knowledge of information security, cybersecurity, and incident management involving personal data.
• Excellent organizational and time‑management skills.
• Ability to work with multidisciplinary and multicultural teams, including legal, product, engineering, information security, and business units.
• Fluent english is essential for interacting with global teams
• Strong communication skills, practical legal judgment, organizational skills, business oriented approach and the ability to prioritize tasks in a dynamic environment.

Key Qualifications

• Familiar with LFPDPPP, GDPR, LGPD, CCPA/CPRA, or other international data protection laws is a plus.
• Familiar with privacy governance tools, GRC, third-party management, or processing activity logs.
• Certifications in privacy, data protection, or information security, such as CIPP/E, CIPP/US, CIPM, CDPO, ISO 27001, Security+, CISSP, or equivalent.

We are equal opportunity employer and do not discriminate against any employee or applicant for employment becauseof race, color, sex, age national origin, religion, sexual orientation, gender identity, status as veteran and basis of disability or any other federal, state, or local protect class.

If you belong to a priority group, such as people with disabilities, we encourage you to share this information if you wish. This will allow us to provide you with reasonable accommodation and ensure an accessible, equitable, and fair selection process.

We believe in treating each other with respect and dignity. We judge all applicants and employees by their qualifications, demonstrated skills and achievements without regard to race, color, religion, gender, gender identity or expression, national origin, ethnicity, sexual orientation, sex, age, disability, veteran status, marital status or any other characteristic protected by local law. When necessary, Lenovo will provide reasonable accommodations for employees with disabilities or those with special religious requirements. All employees help to create a positive work environment by adhering to these standards.

If you require an accommodation to complete this application, please [e-mail]