Data Privacy Specialist Responder

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations and for making a difference to our clients and society. Our workplace embraces diversity and inclusion its a place where you can grow belong and thrive.

The Data Privacy Specialist reporting into the NTT DATA Inc. Group Global Data Privacy Center of Excellence will be responsible for supporting the effective operation of NTT DATA Inc. Groups global Data Privacy program by managing personal data breach response activities data subject requests and central data privacy enquiries. The role is responsible for ensuring timely accurate and regulator defensible handling of privacy matters working closely with Legal Office of Information Security (OIS) IT People and Culture (P&C) Data Protection Officers (DPO) and business stakeholders to ensure compliance with applicable data protection laws and internal standards.

Personal Data Breach & Incident Response Management

• Coordinate the global intake triage and coordinated management of actual or suspected Data Privacy Incidents including Personal Data Breaches unauthorized processing and other privacy noncompliance.

• Perform an initial assessment and classification of incidents (Minor Major Critical) by collecting validating and documenting incident information provided by Incident Management Teams and business stakeholders.

• Perform and document Minor risk assessments including assessment of potential harm to Data Subjects and identification of applicable notification obligations under relevant Data Protection Legislation and support Major and Critical ones with the Incident Management Teams.

• Coordinate with Legal DPOs Incident Management Teams and business stakeholders to support the preparation review execution and evidence retention of required notifications to Clients Data Subjects Data Protection Authorities and other stakeholders where required.

• Maintain comprehensive breach registers investigation records and decision rationales on OneTrust to support audit regulatory review and accountability obligations.

• Contribute to the ongoing improvement of Incident Management Process including development of templates and standard operating procedures.

• Support the preparation of Incident metrics trend analysis and reporting to demonstrate compliance and inform continuous improvement.

Data Subject Requests (DSR) Management

• Manage and coordinate the endtoend intake triage investigation and response to Data Subject Requests (DSRs) including access correction deletion restriction objection portability and consent withdrawal requests in line with applicable data protection laws and internal policies and procedures

• Work closely with IT Legal P&C Marketing OIS DPOs and business stakeholders to identify relevant systems data sources and records required to fulfil DSRs accurately and within statutory timelines.

• Assess the validity scope and complexity of requests applying exemptions and limitations where appropriate escalating complex or highrisk matters to DPOs or legal stakeholders and ensuring requests are handled in a fair lawful transparent and secure manner.

• Ensure that all DSR activities decisions consultations and outcomes are documented logged and retained in accordance with record keeping and confidentiality requirements.

• Contribute to the ongoing improvement of DSR including development of playbooks templates and standard operating procedures.

• Support the preparation of DSR metrics trend analysis and reporting to demonstrate compliance and inform continuous improvement.

Global Data Privacy Inbox Management

• Monitor and manage the central Global Data Privacy group inbox acting as a first point of contact DSR and Incidents requests and assign the other privacy requests to the other privacy areas.

• Ensure timely consistent and well documented responses aligned to global Data Privacy policies standards and approved guidance.

• Identify recurring themes pain points and knowledge gaps in queries to inform updates to guidance materials training and process enhancements.

• Demonstrates a high level of accuracy thoroughness and attention to detail particularly when handling sensitive personal data and regulatorydriven activities

• Strong analytical and critical thinking skills with the ability to assess privacy risk impact to individuals and regulatory obligations

• Demonstrates a pragmatic riskbased approach to data privacy balancing compliance requirements with operational realities

• Strong written and verbal communication skills with the ability to produce clear structured and defensible correspondence and documentation

• Ability to manage highvolume timecritical casework (e.g. Data Subject Requests incidents enquiries) while meeting statutory and internal timelines

• Comfortable working in fastpaced highpressure environments including during live incident and breach response situations including supporting global incident and breach response activities which may require availability outside standard working hours

• Strong organizational and case management skills with the ability to prioritise competing requests and escalate issues appropriately

• Demonstrated ability to work independently with minimal supervision while aligning to defined policies procedures and escalation paths

• Proven ability to work effectively with crossfunctional stakeholders across regions and cultures

• High level of professional judgement and discretion with a strong understanding of confidentiality and needtoknow principles

• Sound knowledge of global data protection laws and regulatory requirements particularly in relation to data subject rights and personal data breaches

• Operates with a high degree of integrity and accountability recognising the sensitivity and regulatory impact of the role

• Bachelors degree or equivalent

• CIPP CIPM or CIPT (Preferred)

• 3-5 years experience in Data Privacy or related fields

• Experience supporting or managing Data Subject Requests (DSRs) and/or personal data breach and incident response activities.

• Experience in working with or advising large multinational organizations.

• Experience supporting compliance or operational governance activities (e.g. case management issue tracking reporting)

• Experience in telecommunications technology and/or professional services (preferred)

• Experience using privacy management or GRC tooling such as OneTrust and/or 6clicks (preferred)

• Strong interest in and commitment to Data Privacy and Data Protection with an awareness of evolving global regulatory expectations

• Able to communicate clearly professionally and confidently with internal and external stakeholders at all levels

• Comfortable working in a globally distributed environment interfacing with multiple cultures regions and time zones

• Demonstrates a strong analytical mindset sound judgement and the ability to work independently within defined processes

• Highly effective in time and workload management with the ability to manage competing priorities and statutory deadlines

• Resilient and composed under pressure particularly during timecritical response activities such as live incidents or breach response

• Takes ownership of work follows through on actions and understands the importance of accuracy confidentiality and auditready documentation

Workplace type:

About NTT DATA
NTT DATA is a $30 billion business and technology services leader serving 75% of the Fortune

Global 100. We are committed to accelerating client success and positively impacting society through

responsible innovation. We are one of the worlds leading AI and digital infrastructure providers with

unmatched capabilities in enterprise-scale AI cloud security connectivity data centers and

application services. Our consulting and industry solutions help organizations and society move

confidently and sustainably into the digital future. As a Global Top Employer we have experts in more

than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as

established and start-up partners. NTT DATA is part of NTT Group which invests over $3 billion each

year in R&D.

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age race colour gender sexual orientation religion nationality disability pregnancy marital status veteran status or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @ email address. If you suspect any fraudulent activity please contact us.