Data Privacy Lead Specialist

The Lead Data Privacy Specialist is responsible for leading HR data privacy and compliance efforts across global HR Operations, ensuring adherence to international data protection regulations, including but not limited to GDPR, CCPA, and other major global privacy standards. This role serves as a key resource for data privacy within HR shared services, focusing on upholding the integrity of personal data, promoting data privacy awareness, and supporting global privacy initiatives across regions such as the EU, the US, and other high-priority locations.

The Lead Data Privacy Specialist will play a collaborative role in supporting compliance projects, handling data subject rights requests, incident management, and driving best practices within the HR organization to achieve high data privacy standards.

People & Culture > Global People Services > P&C Enablement

Responsibilities

1. Data Privacy Governance and Compliance

• Develop, implement, and maintain global data privacy policies, guidelines, and processes specific to HR Operations, ensuring alignment with international data protection standards, including GDPR, CCPA, LGPD, and other relevant regulations
• Act as a primary contact and data privacy expert within HR Operations, supporting compliance efforts across the US, EU, and other high-regulation jurisdictions
• Proactively monitor and assess regulatory developments across key regions to keep HR Operations compliant with evolving global privacy standards

2. Privacy Risk Assessment and Mitigation

• Lead and conduct Data Protection Impact Assessments (DPIAs) for HR data processing across international locations, focusing on identifying and mitigating privacy risks
• Develop actionable recommendations to mitigate privacy risks and ensure global alignment, particularly with regulations such as GDPR and CCPA
• Collaborate closely with global HR, IT, Legal, and Compliance teams to design privacy controls and data protection measures that address country-specific requirements for high-risk jurisdictions

3. Privacy Incident Management

• Oversee and evaluate the lifecycle of privacy incidents related to HR data, including investigation, reporting, and resolution, in accordance with global regulatory requirements
• Ensure timely reporting to relevant data protection authorities in accordance with jurisdiction-specific timeframes, such as 72-hour GDPR notification requirements
• Conduct root cause analyses and implement corrective actions to continuously improve data protection practices globally

4. Data Privacy Training and Awareness

• Design and implement comprehensive training programs on global data privacy principles and best practices tailored to HR Operations staff, SSC employees, and relevant global stakeholders
• Create and distribute global communications to promote privacy awareness and develop a culture of compliance within the organization
• Act as a trusted advisor and subject matter expert, supporting HR Operations globally in addressing data privacy concerns

5. Data Subject Rights Management

• Oversee the global response process for data subject requests (DSARs) across all relevant jurisdictions, including requests for access, rectification, and deletion in line with GDPR, CCPA, and other applicable regulations
• Establish standardized processes to ensure efficient, compliant handling of DSARs within required timeframes, adapting practices to meet the needs of different regions

Qualifications

Education and Certification:

• Bachelor's degree in Law, Data Privacy, Data Protection, IT, or a related field
• Professional certifications in data protection and privacy, such as CIPP/E, CIPP/US, CIPM, or equivalent, are highly preferred

Experience:

• 5+ years of experience in data privacy, data protection, or compliance roles, ideally within a global HR Operations or shared services environment
• Comprehensive working knowledge of GDPR, CCPA, LGPD, and other international data protection laws
• Demonstrated experience in administering global data privacy programs, especially within HR or a multinational environment

Competencies

• Global Regulatory Knowledge: In-depth understanding of international privacy regulations and ability to adapt compliance strategies to meet global and country-specific needs
• Analytical Skills: Expertise in assessing and addressing privacy risks within complex, cross-border data processing operations
• Project Management: Proven experience in developing privacy initiatives across multiple jurisdictions and collaborating with global teams
• Communication: Comprehensive verbal and written communication skills, with a clear ability to convey complex privacy topics to global stakeholders in HR and other functions
• Attention to Detail: Meticulous approach to documentation, data protection assessments, and reporting for global compliance

What we offer

We offer you an exciting role with great professional and personal development opportunities in an inspiring, progressive, international work environment at an established manufacturer of wind turbines. We offer attractive company perks like fitness subsidy, health insurance, pension, life insurance, medical allowance, travel allowance, internet allowance, etc. We have a modern, inspiring office overlooking Manila Bay, conveniently located near public transport. We believe in work-life balance and plan annual offsite outings, team building, and sports events. In Vestas, you will experience an innovative environment where no days are ever the same, strengthening your personal as well as professional growth.

Additional Information

We do amend or withdraw our jobs and reserve the right to do so at any time, including before the advertised closing date. Please be advised to apply on or before the 31st of December 2024.

Additional Benefits

• Fitness Subsidy
• Retirement Benefit Plan

BEWARE – RECRUITMENT FRAUD
It has come to our attention that there are a number of fraudulent emails from people pretending to work for Vestas. Read more via this link, https://www.vestas.com/en/careers/our-recruitment-process

DEIB Statement
At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.

About Vestas
Vestas is the energy industry’s global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore. 
Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 173 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field. 
With 29,000 employees globally, we are a diverse team united by a common goal: to power the solution – today, tomorrow, and far into the future. 
Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity. 
To learn more about our company and life at Vestas, we invite you to visit our website at www.vestas.com and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.