Data Protection / Privacy - Senior Associate

Line of Service

Internal Firm Services

Industry/Sector

Not Applicable

Specialism

IFS - Risk & Quality (R&Q)

Management Level

Senior Associate

Job Description & Summary

Delivering distinctive quality is a central part of what PwC stands for and a fundamental element of what clients, regulators and other stakeholders expect of a market leader in professional services. As a fast growing firm and in line with our vision to be the largest and best professional services firm in the region, it is critical that data quality and data risk be proactively managed, by ensuring that we achieve Operational Excellence in all aspects of Quality and Risk Management; both to protect and enhance the PwC brand and to enable the growth of PwC’s service offerings.
 As a fast growing firm and in line with our vision to be the largest and best professional services firm in the region, it is critical that data quality and data risk be proactively managed, by ensuring that we achieve Operational Excellence in all aspects of Quality and Risk Management; both to protect and enhance the PwC brand and to enable the growth of PwC’s service offerings.

Responsibilities:

This is a full time opportunity to work with the Middle East Data Risk team. It is an opportunity for a talented, self-motivated individual to develop his/her skill set in PwC Middle East and the global PwC network, working with a dedicated team across a wide range of issues.

• Help monitor compliance over all personal data processing activities across the ME region to ensure LoS and IFS functions are aligned with the Network data protection principles and applicable requirements under the GDPR and data protection laws in applicable jurisdictions

• Timely identification of activities that collect / process personal data, and where necessary, run and complete risk assessments (DPRA/DPIA) for such activities and in coordination with relevant teams 

• Ability to analyse risks and controls to ensure data protection related safeguards are being addressed and implemented for activities that process personal data to continue supporting the business in launching new products, applications with an eye for regulatory and data protection matters

• Maintain records of processing, inventories / repositories for all activities that process personal data 

• Timely identification of third parties that collect / process personal data to ensure data protection contract provisions, records of processing and data transfer restrictions are properly addressed

• Review technologies to ensure these are compliant with the applicable data protection regulations.

• Collaborate and work with all core functions within the firm and provide guidance on the processing of all personal data, such as safeguards, best practices and technical reviews of client / third party contracts

• Handle data subject access requests to ensure compliance with applicable data protection laws

• Actively participate in personal data related incidents and assist with investigations, reporting / remedial action as required. 

• Maintain a log of any incidents and remedial recommendations and actions

• Follow best practices and general rules as defined in the DQ Model to maintain data quality in the various systems

• Entrench the validation techniques into the data flow diagram  when creating / updating information

• Set appropriate triggers to timely detect and identify data quality related issues and ensure prompt resolution

• Collaborate and work with all core functions within the firm and provide guidance on the minimum requirements and rules and review criteria to maintain data at a high quality standards

• Identify system issues that affect the quality / contribution and flow of data between systems and work closely with key stakeholders to continuously improve the end-to-end process

• Support in the development and continuous improvement of  internal policies and procedures

• Maintain and establish a register of data owners for records management to ensure efficient on-going data retention and disposal processes

• Keep abreast with the developments in the ME data protection laws and share knowledge within the team

• Identifying, assessing and evaluating violations related to confidentiality breaches

Requirements:

The candidate will be achievement oriented with the ability to be flexible and adaptive on a daily basis. They will be able to work independently and as part of a team with high energy and at a fast pace that will translate into a high quality output.

• 5 - 7 years of relevant experience with Bachelor’s degree or equivalent in relevant subject areas (such as Risk Management, Finance, Business administration)

• Demonstrate ability to build relationships, work across multinational teams and with a wide variety of individuals at different levels – from senior partners to staff

• Strong interest and passion for PwC and looking to further develop him/herself and his/her PwC network

• Excellent organisational skills, having the ability to prioritise workload whilst being resilient and being able to cope well under pressure and meeting tight deadlines

• Excellent interpersonal and communication skills (verbal and written). Fluent in English but multilingual Arabic speaker preferable

• Demonstrates analytical skills 

• Driven with the ability to work both independently and as part of a team

• Personal gravitas and ethical behavior

• Seeking opportunities for improvement, automation and efficiency gains.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Available for Work Visa Sponsorship?

Government Clearance Required?

Job Posting End Date