Personal Data Protection, Senior Specialist

Master Works is seeking a Personal Data Protection, Senior Specialist to support the organization in establishing, implementing, and maintaining effective personal data protection and privacy practices.The role will be responsible for supporting compliance with applicable personal data protection laws, regulations, policies, and internal controls, while working closely with business, legal, risk, information security, and technology teams to ensure personal data is appropriately managed and protected throughout its lifecycle.Key ResponsibilitiesSupport the implementation and continuous improvement of the organization's personal data protection and privacy frameworkMonitor and support compliance with applicable personal data protection laws, regulations, policies, and standardsDevelop, review, and maintain personal data protection policies, procedures, guidelines, and controlsSupport the identification, assessment, and mitigation of personal data protection and privacy risksCollaborate with Information Security, Risk, Legal, IT, Data Management, and business teams on data protection initiativesSupport the classification, handling, storage, retention, and secure processing of personal dataAssist in assessing data processing activities and identifying privacy and data protection requirementsSupport privacy and data protection assessments, audits, and compliance reviewsMonitor and report on personal data protection compliance, risks, and control effectivenessProvide guidance to relevant stakeholders on personal data protection requirements and best practicesSupport awareness and training initiatives related to personal data protection and privacyKeep up to date with changes in personal data protection laws, regulations, standards, and industry practicesContribute to the continuous improvement of personal data protection processes, controls, and governance practicesRequirementsEducationBachelor's degree in information technology, Computer Science, Cybersecurity, Law, or another related fieldExperience5+ years of relevant professional experience in data access, data protection, privacy, information security, data governance, risk, compliance, or a related fieldExperience in personal data protection, privacy, risk management, or information security is highly preferredExperience working with data protection policies, frameworks, controls, and compliance requirementsKnowledge & SkillsGood knowledge of Personal Data Protection laws, regulations, policies, and compliance requirementsStrong understanding of data protection and information security principlesKnowledge of data classification, data privacy, data handling, and information protection practicesUnderstanding of privacy and data protection risks and related controlsAbility to interpret regulatory requirements and translate them into practical policies, processes, and controlsStrong analytical, problem-solving, communication, and stakeholder management skillsAbility to work effectively with cross-functional teams, including Legal, Risk, Information Security, IT, and business functionsPreferred CertificationsCertified Information Privacy Manager (CIPM) Certified Information Privacy Technologist (CIPT)Location: Client Site