Data Protection Coordinator

Job description

BNP Paribas is a leader in the Eurozone, and a prominent international banking institution with strong roots in Europe's banking history. It has a presence in 71 countries, with 200 000 Employees – including more than 150 000 in Europe and 6 000 in Portugal alone.

BNP Paribas is present in Portugal since 1985, having been one of the first foreign banks to operate in the country. Today, the Group has several entities operating directly in this territory, offering a wide range of integrated financial solutions to support its clients and their businesses.

Thanks to its international presence and regular and close collaboration among its businesses, BNP Paribas has the resources to support all clients -- individuals, entrepreneurs, SMEs, large corporates, institutional investors and community organisations -- with financing, investment, savings and protection solutions that help make their projects a success. BNP Paribas holds key positions in its three core operating divisions: Domestic Markets and International Financial Services for retail banking and specialised financial services, and Corporate & Institutional Banking for corporate and institutional clients.

The Data Privacy and Protection department, under the Group Data Protection Officer (Group DPO) who in turn reports to the Group Chief Risk Officer (CRO), is part of the Group Risk Functions within BNP Paribas acting as a 2nd Line of Defence (LoD). With a multidisciplinary team (e.g. management, legal, IT) integrated in the RISK ORC ICT - Global Lisbon CoE, this department has the responsibility for Group-wide approach of key data privacy and protection topics and for coordination of activities for DPOs at Group level.

ROLE AND RESPONSIBILITIES

The Data Protection Coordinator will assist with the implementation, management and monitoring of the data privacy and protection strategy and the creation and roll-out of policies, guidelines, and data protection awareness training.

Moreover, will identify and manage risks related to data privacy and protection, and escalate risks and issues to executives, as needed.

Will coordinate and oversight of activities in relation to the following:

·
Review controls implemented by the business (1st LoD) to inform, advise and issue recommendations to the business with regards to data protection, privacy and compliance, including with data protection laws (e.g. GDPR, HIPPA, DPAct) and internal policies and guidelines

·
Foster a data protection culture within the Group and help to implement essential elements of the data protection (e.g. principles of data processing, data subjects’ rights, data protection by design and by default, security, data breaches management)

·
Advise 1st LoD (controllers/ processors) and DPOs regarding data protection and privacy management requirements and policies (e.g. DPIA process & objectives, safeguard measures to mitigate the risks – technical, organizational & formal –, record of processing operations management)

·
Promote continuous training to maintain data protection awareness and feedback, and also include protection as part of the Group agenda

·
Document all decisions taken consistent with and opposing DPO’s advice

·
Support DPO Group in the communication and as point of contact for both data subjects (e.g. customers) and the regulatory authorities

·
Offer consultation once a data breach or other incident has occurred and must be involved in relevant issues in a timely manner and report directly to highest management level

·
Attend regular/ ongoing data protection, information security and privacy training

PROFILE

·
Previous experience and expertise in national and transnational data privacy laws (e.g. GDPR, HIPPA, DPAct, POPI), regulations and practices

·
Understanding of data processing operations, including business applications and data use

·
Understanding of cross over between legal, IT and data security requirements.

·
Experience of promoting a data privacy culture of awareness and understanding (preferably within a Bank)

·
Experience of developing and assessing privacy policies and controls that minimize risk and ensure compliance

·
Experience of responding to potential privacy incidents, to mitigate risk, determine reporting requirements, and developing corrective action plans when needed

·
Demonstrated leadership and problem-solving skills, and ability to work under pressure

·
Experience of communicating effectively with the highest levels of management and decision-making individuals within the organization

·
Familiarity with privacy and security risk assessment, best practices and gap analysis, privacy certifications/seals, and information security certifications

·
Team-player such that focus on the success of the team. Working well both with others, as well as individually, in a multicultural and multidisciplinary context

·
Privacy, data protection and information security certifications (a plus)

·
Fluent in English (mandatory) and French or other languages (desirable)

Please note that only applications submitted in English will be considered.

In case you are selected for this role, further documentation will be requested to support your hiring process.

BNP Paribas is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.