General Information
Description
GRUPO BNP PARIBAS
To define, secure and monitor the archivement of the legal requirements related to privacy and data protection under the scope of Risk Management.
TASK & RESPONSABILITIES
· To manage communication with any third parties.· To monitor the personal data framework of the entities under scope
· To monitor and to provide opinion related to the implementation of “privacy by design” principles in close collaboration with Legal, Business and IT areas.
· To review & to give opinion about security principles implemented related to personal data treatment.
· To review the processing activity registers
· To build and to implement a robust sensibilization program for the entities under scope
· To collect the necessary info from other areas and to elaborate the answer to those claims received from the Spanish Data Protection Agency, building the right processes to obtain in time the info.
· To define and to execute the LoD2 controls and to perform independent test of the personal data protection framework to verify its relevance.
· To provide independent reports and to alert, when necessary, about the critical points not covered to the Top Management and DPO of territory.
· To coordinate DPC activities under its scope
· To coordinate & to elaborate the Personal Data Protection & Privacy committee and to contribute to the territory and PF consolidated PDP&P committee.
· To be part of the TAC/NAC committees as well as of any project that involves personal data treatment, providing an independent opinion.
· Close collaboration with Operational Risk department (also in Risk Department) to monitor LoD1 correct implementation of control framework & RCSA related to Data protection activities. To monitor the right declaration of HI, PI in the group tool, and to define and to supervise the implementation of actions plans defined.
· To manage the relationship with internal / external auditors and regulatory supervisors.
SKILLS
· Well knowledge of applicable laws & regulations related to the financial industry in terms of personal data protection.
· Deep knowledge to implement, to develop and to monitor the control framework of data protection.
· Communication skills
· Flexibility
· To be identify with the entity purpose.
· Management of people
· Customer oriented
· Analytical thinking
· Strategic thinking
· Teamwork and transversal focus
· Knowledge about the entity activities / consumer lending market
EXPERIENCE
Minimunm 5 years in DPC/DPO roles in banking or consumer entities performing functions as detailed above.
KNOWLEDGE OF TOOLS DESIRABLE
- Microsoft Office
- Power BI
- SQL Basic
VALUABLE SKILLS
- Communication
- Flexibility
- Identification with the company
- Results Orientation
- Customer Focus
- Analytical thinking
- Teamwork and Coorperation
- Knowledge of the company and the business
- Knowledge of consumer credit market
LANGUAGES
- Spanish
- English B2
- French will be valued