Data Privacy Specialist

Nttlimited; Johannesburg; On-site; ZAR 700,000 - 850,000; Full time

Job summary

NTT DATA is seeking a Data Privacy Specialist to lead the implementation and oversight of our data privacy program within Global Practice Portfolios. You will collaborate with stakeholders to embed privacy controls across processes, systems and products, ensure compliance with laws, and support client engagements and risk assessments.

Join a global team dedicated to protecting personal data, driving privacy by design, and supporting responses to data subject requests and regulatory inquiries.

Responsibilities

• Act as a key point of contact on data privacy matters within Global Practices portfolios.
• Embed privacy policies, procedures, and standards in the regions by working with stakeholders.
• Review privacy policies to meet business and legal requirements; document local variations.
• Implement controls to support privacy by design in processes, systems, databases, products and services.
• Manage the roll-out of Data Privacy requirements for new initiatives/projects.
• Document processing activities including data flows and cross-border transfers.
• Ensure privacy notices are clear, specific and compliant with laws and regulations.
• Perform privacy assessments of products and services and advise on privacy control design.
• Support the business in RFPs and client questionnaires on privacy controls and ISPMS.
• Support third-party security and privacy assessments to ensure appropriate controls.
• Assist in negotiating data processing/share agreements and maintain third-party registers.
• Support escalation of data subject requests under applicable laws.
• Assist in responding to Data Privacy Incidents with the Privacy team.
• Respond to queries, audits or investigations from data protection authorities.
• Consult with Data Protection Officers to meet obligations.
• Document and assess Data Privacy risks and develop mitigation strategies.
• Monitor and report on the effectiveness of Data Privacy controls across portfolios.

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

Your day at NTT DATA

The Data Privacy Specialist reporting to the NTT DATA, Inc. Global Data Privacy Center of Excellence will be responsible for the effective implementation and oversight of the data privacy program in the NTT DATA Global Practice Portfolios.

The Data Privacy Specialist will work closely with stakeholders across the Global Practice portfolios to ensure that appropriate controls across people, process, and technology are put in place to support compliance with data protection laws and regulations, industry standards and NTT DATA, Inc. Group's global Data Privacy policies, standards and procedures.

What are the NTT DATA Global Practices?

Within NTT DATA, the Global Practices is the division which is responsible for the development and delivery of NTT DATA's products and services.

Key Responsibilities:

The Global Practices Portfolio Specialists will work within the Global Practices Privacy team and with the Global Practice portfolio(s) in order to:

• Act as a key point of contact on data privacy matters within Global Practices portfolios.
• Embed NTT DATA, Inc. Group's Data Privacy policies, procedures, and standards in the regions by working closely with stakeholders from across the Global Practices portfolios and awareness raising.
• Review NTT DATA, Inc. Group's Data Privacy policies, procedures and standards to ensure that these meet business and legal requirements for data privacy within Global Practices portfolios. Where required, define and document local variations and/or translations to NTT DATA, Inc. Group's Data Privacy policies, procedures and standards to ensure compliance with local data protection laws and regulations.
• Implement appropriate controls to support and enforce the principles of data privacy by default and by design in our business processes, applications, systems, databases, and products, services and solutions.
• Manage the roll‑out and implementation of Data Privacy requirements of new initiatives/projects from the NTT DATA, Inc. Group Global Data Privacy Center of Excellence.
• Work with stakeholders in the business to ensure that the record of processing (including data flows and cross‑border data transfers) is documented, accurate, complete, and up to date for all processing activities.
• Work with stakeholders in the business to ensure that the organization has documented clear, specific and accessible privacy notices to inform individuals of the processing of their personal data in accordance with applicable laws and regulations.
• Perform privacy assessments of NTT DATA products and services to ensure that Data Privacy by Design principles and compliance requirements are embedded within client product and service offerings. This includes providing technical advice on privacy control design and implementation, as well as supporting the creation of go‑to‑market collateral to support bid and sales processes.
• Support and advise the business in its response to RFPs and client questionnaires in respect of the organization’s Data Privacy program, Information Security and Privacy Management System (ISPMS), and Data Privacy controls.
• Support the performance of third‑party information security and privacy assessments to ensure that third parties have appropriate controls in place to comply with applicable data protection laws and regulations and NTT DATA, Inc. Group's Data Privacy policies. This may include periodic third‑party audits or assessments.
• Support legal teams in the negotiation of data processing and sharing agreements with third parties and ensure a third‑party register is maintained of all third parties who process personal data on the organization’s behalf.
• Support escalated data subject requests in accordance with applicable data protection laws and regulations and NTT DATA, Inc. Group's Data Privacy policies and processes.
• Support the response to Data Privacy Incidents in Global Practices portfolios by working with the Data Privacy Incident Manager in accordance with applicable data protection laws and regulations and NTT DATA, Inc. Group's Data Privacy and Data Privacy Incident Response policies and procedures.
• Respond to any queries, audits or investigations from data protection authorities in consultation with the NTT DATA, Inc. Group Global Data Privacy Center of Excellence and relevant Data Protection Officer.
• Consult and work together with the relevant Data Protection Officer’s to ensure that the organization meets its data privacy obligations.
• Document and assess Data Privacy risks in the business and develop strategies to manage or mitigate them.
• Monitor and report on the implementation and effectiveness of Data Privacy controls across