Data Privacy Officer

Job Type

Full-time

General Description

Responsible for ensuring compliance with data privacy laws and regulations; updating privacy policies and procedures; keeping abreast of new and proposed privacy laws; reviewing new and proposed laws to determine applicability and assess and document Popular readiness; updating privacy disclosures on an annual basis; understanding the business purpose of obtaining data to update the record of processing activities and legitimate interest.

Essential Duties and Responsibilities

Review new and proposed US and International Data Privacy laws and regulations to determine applicability to Popular
Analyze results and determine an action plan to ascertain compliance
Document analysis performed
Ascertain there is a plan to address any upcoming new requirements or changes to existing requirements
Review Privacy Handbook on an annual basis  and update as needed, taking into consideration changes in laws, regulations, and organizational changes
Review on an annual basis Data Privacy disclosures and update log of disclosures
Coordinate with the Compliance Division the timely publication of the disclosures in all platforms and systems.
Ascertain cookies banner and opt out are updated
Prepare /update templates to communicate security incidents to clients, regulators and supervisory authorities of the countries that are members of the European Union
Ascertain that all processes of the Corporation are evaluated for Privacy issues
Update the BPR according to the priorities established for each process
Update documentation and Record of Processing Activities
Update Legitimate Interest documentation
Coordinate with CSG’s PIM area to generate on a quarterly basis, Popular’s exposure to data privacy laws (CCPA and GDPR)
Review e-learning on an annual basis (for all employees and targeted trainings)
Ascertain that training is available to all employees
Coordinate with corresponding units 
Assist in the evaluation of new products or services, and service providers as needed
Participate in various committees, as deemed necessary
Participate in the operationalization of the recommendations provided by Deloitte in its Privacy Assessment

Education

Experience

Two (2) years’ of experience in an audit or compliance role within the financial services industry.

Certifications / Licenses

Knowledge, Skills and Abilities

Strong business acumen: ability to understand the needs and concerns of business stakeholders and colleagues and respond promptly and effectively to stakeholder requests. Ability to conduct analysis on work procedures, business results and recommends changes to improve the effectiveness of the business's management.

Communication skills: effectively interact with internal and external stakeholders. Ability to foster trusting relationships with colleagues and clients. Highly develop written and verbal communications skills, strong ability to communicate ideas (storytelling). Presents numerical data effectively. Superior communication and interpersonal skills. Excellent report-writing and presentation skills. Polished in preparing presentations, summaries, and reports for all audiences.

Analytical skills: Stays focused on main issues, prevents irrelevant issues or distractions from interfering with timely completion of assignments. Collects, research and complements data; Synthesizes complex or diverse information. Demonstrates attention to detail; Applies design principles; Generate creative solutions. Strong quantitative, research and analytical skills. Experience with data analysis, persuasive and informative writing, workload management, and process management.

Problem Solving: Identifies and resolves problems in a timely manner; Develops alternative solutions.

Knowledge, Skills and Abilities (cont.)

Project Management: Ability to prioritize and work with multiple projects and tasks with minimum supervision; self-direct and task switch between strategic and tactical initiatives regularly. Capacity to achieve results according to plan ensuring the expected quality. Excellent organization capacity to define priorities, meet deadlines, and flexible to change. Knowledge on project coordination, identification of business needs, work plan, budget control, time management, resource allocation, team management and status reports. Must demonstrate leadership, logic, and reasoning skills.

Operational/Regulations Processes: Knowledge on budget administration, resources allocation, organization’s policies, and regulations. Ability to establish, conduct and track operational processes properly.

Computer and Technological Skills: Proficient in MS Office 365. Experience with data management tools such as Power Pivot, Power BI, among others is desired. Ability to achieve results by providing innovative ways of working with operational and technological considerations.

Region Locations

Puerto Rico

Work Schedule

Hybrid

Values

Additional Requirements

The information provided here is only a general guide as to the nature of the position and does not constitute an exact description of the goals, tasks, duties, and responsibilities of the position. The specific details of each position are described in the employee’s performance evaluation.