[Hiring] Data Privacy & Compliance Engineer @NTT DATA, Europe & LATAM, Branch in USA, Inc.

Role Description

NTT DATA is looking for high-achieving team players that are quickly adaptable to new challenges and entrepreneurial ventures. We are looking for a Data Privacy & Compliance Engineer (One Trust) to work remotely from USA with our global client.

• OneTrust · Data Discovery & Data Governance (core)
  • Discovery and scanning:
    • Configuration of connectors to structured and unstructured sources (relational databases, data lakes and object storage, cloud warehouses, SaaS applications, file repositories and collaboration tools).
    • Scan scope definition, scheduling and performance tuning.
  • Classification:
    • Use and customization of out of the box classifiers.
    • Creation of custom classification rules and regular expressions.
    • Sensitivity and regulatory category assignment, and tuning to reduce false positives.
  • Retention and minimization:
    • Retention schedules, defensible deletion workflows.
    • Management of redundant, obsolete and trivial data.
    • Reduction of the sensitive data footprint.
• OneTrust · Data Use Governance & Control Enforcement
  • Data policy engine:
    • Definition of data policies from regulatory intelligence or from internal standards.
    • Continuous evaluation of the estate against those policies.
    • Management of violations such as expired retention, unencrypted sensitive data, open access or data stored out of place.
  • Control push down:
    • Configuration of policy push down to cloud data platforms.
    • Verification of where each control has actually been applied.
  • Orchestrated remediation:
    • Automated remediation actions such as deletion, quarantine, archival, redaction and access restriction.
    • Routing of the remaining actions to platform owners through ITSM workflows with tracking to closure.
  • Boundary of responsibility:
    • Ability to specify the required control and evidence its application.
    • Avoiding duplication of ownership between the compliance layer and the data platform.
  • Audit of control effectiveness:
    • Reconciliation of policy intent against the controls actually in place.
    • Use of platform audit logs as evidence.
    • Reporting of residual exposure.
• OneTrust · Privacy Automation & Rights
  • Records of processing (RoPA):
    • Design of the processing activity model, templates, ownership and periodic attestation cycles.
  • Assessments:
    • Configuration and rollout of PIA, DPIA, TIA and transfer impact assessments.
    • Including questionnaire design, risk libraries, approval workflows and mitigation tracking.
  • Data subject rights (DSAR):
    • Intake portals, identity verification, request routing.
    • Automated search and fulfilment against connected systems, redaction, and SLA tracking by jurisdiction.
  • Incident and breach management:
    • Intake, assessment of notifiability by jurisdiction, task orchestration and generation of regulatory documentation.
  • Consent and preferences:
    • Consent and cookie compliance configuration, preference centres.
    • Propagation of consent and purpose of use to downstream systems.

Qualifications

• OneTrust platform certifications at expert level in the relevant modules (Privacy Automation, Data Discovery, Third Party Risk, Tech Risk and Compliance).
• IAPP CIPP/E or CIPP/US, CIPM, or CIPT.
• Informatica Cloud Data Governance and Catalog, Professional Certification (ICP).
• ISO 27001 Lead Implementer or Lead Auditor.

Requirements

• This role requires the use of a personal laptop.
• Candidates must be comfortable with company security software and device management tools being installed on their laptop as part of the onboarding process and for the duration of the engagement.