Location: Gothenburg (Sweden)


KEY RESPONSIBILITIES

- Support stakeholders in VFS markets to document Processing Activities in VFS’ Record of Processing Activities (RoPA) in OneTrust, and oversee quality and accuracy of the RoPA
- Manage Data Subject Requests and Personal Data Breaches according to Volvo Group and VFS processes, working closely with GPO, VFS Legal Counsels and various business teams across the globe
- Develop guidance for VFS on appropriate retention of personal data and develop and implement data hygiene (cleasing, deletion, sanitization) campaigns across the organization
- Promote and drive the implementation of Privacy by Design to secure compliance with data privacy requirements in ongoing projects or change initiatives. This includes identifying potential risks and supporting business and IT in developing compliant products, services and IT solutions
- Actively contribute to the implementation of (other) strategic privacy projects, either driven by VFS or Volvo Group
- Drive the continued training and awareness activities for data privacy, in alignment with VFS Legal & Compliance
- Collaborate with Information Security and Operational Control to harmonize and coordinate IT compliance efforts
- Maintain relationships with locally appointed DPOs, support local or regional privacy compliance projects where needed and contribute to the global harmonization of privacy compliance in VFS
- Provide clear, actionable advice on various privacy matters
- Write newsletters and articles to be published on internal VFS communication channels
- Stay up to speed with global legal development in the area of privacy
- Acquire knowledge of Volvo Group and VFS processes, data flows and IT systems
- Develop a good working relationship with different teams and layers of the organization

EDUCATION & PROFESSIONAL EXPERIENCE

- Minimum Bachelor’s degree
- Minimum 3-5 years experience in privacy with a profound knowledge of global privacy laws and regulations (such as GDPR, CCPA, POPIA and others)
- Certifications such as CIPP are preferable but not required
- Knowledge and experience in implementation of OneTrust
- Knowledge of other Privacy Compliance and AI tools is preferred but not required
- Knowledge of information security principles and risk management

PREFERABLE COMPETENCIES & SKILLS

- Excellent computer skills and proficiency with Office 365 applications including Word, PowerPoint, Excel
- Excellent communication and public speaking skills, and the ability to interact with all levels of the organization
- Ability to organize and prioritize work effectively on multiple tasks with minimal supervision
- Flexibility and adaptability with proactive, service-oriented approach
- Problem solving and analytical skills
- Ability to build relationships and operate successfully in a multi-national and multi-cultural organization
- Collaborative mindset open to giving and receiving ideas, perspectives and feedback