Data Protection Manager (3483)

About GBG

GBG is the leading expert in global digital identity. We combine our powerful technology, the most accurate data coverage, and our talented team to deliver award-winning location intelligence, identity verification, and fraud prevention solutions.

With over 30 years’ of experience, we bring together a team of over 1,250 dedicated experts with local industry insight from around the world to make it easy for businesses to identify and verify customers and locations, protecting everyone, everywhere from fraud.

Why you should be@GBG

(with the 95% of our team members that recommend us as a great place to work)

• We make the world a safer place
• We trust each other and win together
• We are local experts in a global business
• We want you to be yourself
• We grow when you grow

Privacy and Data Compliance Team

The vision for our privacy team is “to provide the ‘know-how’ to enable privacy and data compliance, supporting Identity Data Intelligence globally at pace”. As a fast-growing, global business, this team provides a challenging environment with days rarely the same. We’ve launched and continue to promote be/compliant which has 4 key principles to ensure all team members “think privacy” upfront, helping to embed data compliance into operations.

The Role

You will be a part of the Privacy and Data Compliance Team dedicated to the USA, supporting all product offerings in country, where you operate as a trusted advisor, whilst working together as a team to ensure GBG is compliant with applicable legislation and contractual obligations. However, you may also at times be asked to work on matters relating to other jurisdictions in North and South America, primarily Canada.

What you will do

• Be a trusted advisor in relation to privacy and data compliance, responding to internal and external questions.
• Continually review and enhance internal processes to evidence privacy and data compliance. This may include supporting internal or external audits, which would be conducted by our Audit Team who sit under the same Privacy and Data Compliance Team.
• Nurture high quality relationships with colleagues, clients, and partners, plus ensure members of the public have a great experience with GBG if we receive any requests relating to the Americas.
• Support the Products Team regarding implementing & maintaining Privacy by design, enabling compliant data, products & services, etc. Thus, when a product concerns data subjects in your region(s) you would be consulted to provide guidance on compliance.
• Support the different business teams in implementing new technologies that access personal information, to ensure compliance with applicable data protection laws
• Conducting DPIAs on OneTrust to assess privacy risks for our products and respond to Rights Requests on OneTrust.
• Create and maintain ongoing training and awareness to ensure team members are aware of what they need to do to be/compliant
• Assist with any Data Subject Requests, as necessary to support our internal Rights Requests Team
• Assist with reviewing Data Protection Agreements

Requirements

What we're looking for

• Ability to understand regulatory requirements quickly, then apply them to ensure GBG’s compliance. To support this, you may need to collaborate with internal and/or external experts to meet GBG’s goals, but we will always provide you with needed support.
• Ability to work effectively and efficiently under pressure, and to strict deadlines.
• Strong interpersonal skills, with the ability to persuade and influence others at all levels, with specific experience in managing difficult personalities.
• Questioning nature, allows you to uncover the full picture, which may then prompt areas for further investigation/resolution.
• Demonstrable evidence you are a quick learner, who can quickly understand complex requirements. This may be researching and then applying local data protection rules/guidance to get to grips with technical solutions.
• Experience within a complex organization, preferably within the same industry or similar.
• Knowledge of privacy law in the Americas. The ideal candidate will have knowledge and experience dealing with the CCPA, VCDPA, and the other US laws that are coming into effect, as well as BIPA, CANSPAM, PIPEDA, LGPD, etc.
• Ability to provide specialist advice and recommendations across a range of data protection topics including individual rights requests, data breach management, and data sharing.

Additionally…

This role is fully remote, but you may be asked to