Senior Analyst, Data Privacy

Main Responsibilities

• Provide advice and developing guidance for MUFG and members of staff, including Business Process Owners (BPOs) on how to meet their data privacy and protection obligations.
• Raise awareness of data privacy matters within the organisation; and cascading key messages and comms to the business and Business Process Owners to proactively manage risks within the organisation.
• Manage the training schedule and update of training material relating to data privacy and protection requirements as well as tracking and reporting on completion status.
• Support the Business Process Owners (BPOs) in keeping their records of business activities up to date, accurate and complete, and coordinating the annual update exercise of such records to completion. Ensuring that the list of Business Process Owners is kept up to date and accurate at all times. Track any changes on the ROPA and escalate to relevant SME for review / quality checks. Conduct quality checks to ensure controls are in place taking a risk based approach. Maintain other registers e.g. DPIA register.
• Maintain the list of policies and procedures on the GDPR Kizuna page and on other sites; and coordinating with the Data Privacy team and global team on the annual update process. Organize and manage the team’s shared drive folders to ensure documents are stored in the correct locations, maintain the latest versions, and implement better labelling for a more structured approach.
• Being the point of contact for the DPIA mailbox, the DPO mailbox and other data privacy related mailboxes, redirecting queries to the appropriate data privacy and CBDM contacts for responses, while providing general advice and being the first responder for queries.
• Being the first responder for incidents and breaches which are reported to the Data Privacy Team and coordinating to ensure that incidents are promptly investigated and reported where required within applicable timeframes; as well as coordinating with the business on
• Support on triage, determining the need for, and coordinating advice and approvals on data protection impact assessments (DPIAs)/ Transfer risk assessments and other assessments such as the Cross border data management (CBDM), also while coordinating with the global data privacy team. Support on maintain the list of privacy assessments and ensuring there are clear audit trails for approval and closure.
• Provide support as and when required to develop and enhance privacy compliance-related policies, procedures, processes and internal controls in support of the Global Privacy Program, and the compliance programs overseen by EMEA compliance teams. Support strategic initiatives relating to data privacy and CBDM in the region.
• Attend relevant regulatory outreaches and seminars, events, and providing summary reports to the relevant office, including follow up on any actions in coordination with the local compliance team. Prepare slides and take minutes for DPO meetings to ensure clear communication and documentation.
• Support on coordinating the team’s monitoring and assurance exercises, and responses to issues raised in compliance examinations, audits and quality control testing.
• Support on fulfilling requests from individuals to exercise their data subject rights to ensure they are fulfilled within required time frames.
• Support the preparation of metrics and reports to the several EMEA office DPOs as well as to EMEA Head of Data Privacy and to leadership in EMEA Compliance and the Global Data Privacy Officer, as well as to committees and senior management on regional privacy related issues, trends, exceptions, and program enhancements within the EMEA region.
• Conduct horizon scanning of local regulatory changes as relevant to the covered jurisdictions and logging those in the appropriate trackers and ensuring that the data privacy team provide regular updates/closure

KEY RESPONSIBILITIES

• Tasks across MUFG’s Banking arm and Securities business under a dual-hat arrangement. Under this arrangement, the role will act and make decisions on behalf of both the Bank and Securities business, subject to the same remit and level of authority, and irrespective of the entity which employs the successful candidate. For country specific decisions, the decisions need to be taken only post consultation with the country’s DPO.

WORK EXPERIENCE

Functional / Technical Competencies

Education / Qualifications

• Essential:
• University degree or equivalent
• Preferred:
• CIPP/E and /or other relevant certifications

PERSONAL REQUIREMENTS

• Excellent communication skills
• Strong customer service and project management skills.
• Results driven, with a strong sense of accountability
• A proactive, motivated approach.
• The ability to operate with urgency and prioritise work accordingly
• The ability to demonstrate sound judgement
• A structured and logical approach to work
• Strong problem solving skills
• A creative and innovative approach to work
• Good interpersonal skills
• Good attention to detail and accuracy
• Cultural awareness
• Excellent Microsoft Office skills

PERFORMANCE AND DUTIES

• The role holder will be assessed in accordance with their employing entity’s performance framework and process with relevant input obtained from the dual hatting entity as relevant.
• As duties and responsibilities change, the job description will be reviewed and emended in consultation with the role holder. The role holder will carry out other duties as are within the scope, spirit and purpose of the role as requested by their line manager or Department Head.

MANAGING CONFLICTS OF INTEREST