Data Privacy Officer at AIICO Insurance

Responsibilities
Data Privacy & Protection Operations:

• Support the implementation of data privacy frameworks, controls, and procedures.
• Assist with data mapping and data flow analysis across business units.
• Handle internal data subject access requests (DSARs) and ensure responses within required timelines.
• Maintain the data processing activity register (RoPA).
• Assist in data breach detection, escalation, documentation, and reporting processes.

Third-Party/Vendor Compliance:

• Track and document third-party Data Processing Agreements (DPAs).
• Support third-party risk assessments and due diligence questionnaires.
• Ensure on-boarding documentation includes privacy compliance checklists.

IT GRC Support:

• Assist in performing IT risk assessments and documenting control gaps.
• Maintain and update IT and privacy compliance policies, procedures, and SOPs.
• Support internal audits and external compliance reviews.
• Monitor compliance with security standards (e.g., ISO 27001, NIST, CIS) as related to data privacy.

Training & Awareness:

• Assist in developing and disseminating privacy awareness materials.
• Support scheduling and logistics for employee data protection training.
• Track employee participation and training records.

Documentation & Reporting

• Compile regular status reports for management on privacy/GRC activities.
• Data gathering for preparation of Board committee reports
• Maintain incident logs, risk registers, and audit trails.
• Provide administrative support for privacy meetings, assessments, and compliance initiatives.

Requirements

• Education-Bachelor's Degree in Information Technology, Computer Science, Law, or a related discipline.
• Experience-At least 1-2 years of experience in data privacy, information security, IT GRC, legal advisory or related roles.