Assistant Privacy, Risk and Compliance Officer

About the role

The Assistant Privacy, Risk and Compliance Officer provides operational and administrative support to the Privacy, Risk and Compliance Officer (PRCO) in running global privacy, risk and compliance programs at country level. The role keeps records accurate, gathers evidence for audits, tracks vendor risks and monitors compliance controls so the subsidiary stays audit-ready.

Key responsibilities

• Maintain accurate, complete and up-to-date Records of Processing (RoPAs) for controllers and processors in OneTrust
• Gather, organise and upload evidence for internal and external privacy audits, track action plans and follow up with departments
• Support vendor due diligence by coordinating DPAs, security assessments and contract clauses from procurement and legal
• Monitor mandatory privacy controls such as policy communications, training completion and consent tracking
• Assist in logging, assessing and escalating potential data breaches under the PRCO's direction
• Help coordinate privacy notices, internal guidelines and awareness communications to the workforce
• Compile data and prepare basic reports on compliance metrics, risk register updates and audit status

Required profile

• Bachelor's degree or equivalent experience; privacy background or specialization
• 1-3 years of experience managing privacy and compliance programs in a large corporation
• Privacy certification (e.g. CIPP/CIPM) or ability to obtain one quickly
• Experience in privacy, risk or compliance roles

Required skills

• Fluent English (speaking, reading, writing)
• Knowledge of data privacy laws and frameworks such as GDPR and CCPA/CPRA
• Proficiency in GRC/privacy tools such as OneTrust and Microsoft Office (Excel, PowerPoint)
• Understanding of vendor risk and privacy in contracts (DPAs, SCCs)
• Analytical thinking, problem solving, communication and stakeholder influence