Job Description
Job Purpose: To provide support, aggregation, implementation of data related to “Records of Processing Activities” (ROPA) activities associated our platform. Working under the direction of ICRM leadership, this individual will help implement solutions and manage associated data related to the development and enhancement of our platform, helping support the maturity of the overall Information Compliance Risk Management (ICRM) program.
Key Areas of Responsibility:
- ROPA Record Development
• Create and maintain ROPA entries in alignment with U.S. privacy regulatory requirements and internal standards.
• Ensure accuracy, completeness, and consistency of records across business units.
- Business Engagement
• Act as a liaison with business process owners (BPOs) to gather necessary data and clarify processing activities.
• Facilitate interviews, workshops, and follow-ups to ensure timely and thorough data collection.
- Collaboration with U.S. DPP Team
• Work closely with the U.S. DPP team to align on priorities, receive guidance, and escalate issues or gaps.
• Participate in regular check-ins and contribute to status reporting and planning.
• Track progress, identify risks, and propose mitigation strategies.
- Process Improvement
• Identify opportunities to streamline ROPA data collection and maintenance processes.
• Contribute to the development of templates, guidance documents, and training materials.
Qualifications & Experience:
- 1+ years’ experience in OneTrust.
- Experience conducting business process mapping or working with business process owners to gather operational data.
- Strong organizational and project management skills, with the ability to manage multiple priorities and meet deadlines.
- Excellent communication and interpersonal skills, especially in engaging stakeholders and translating technical/legal concepts into business language.
- Proficiency with data management tools (e.g., Excel, SharePoint, or privacy management platforms like OneTrust, etc.).
- Familiarity with U.S. privacy laws and frameworks, such as CCPA/CPRA, HIPAA, GLBA, or sector-specific regulations. Knowledge & Skills:
- Records of Processing Activities (ROPA): Familiarity with the purpose, structure, and regulatory requirements of ROPA under global and U.S. privacy laws.
- Business Process Mapping: Knowledge of how business processes function and how to document data flows and processing activities.
- Data Governance & Lifecycle Management: Understanding of how data is collected, used, stored, shared, and disposed of across its lifecycle.
- - Privacy Risk Management: Awareness of how to identify and mitigate privacy risks in business operations.