AVP - India Data Protection Correspondent

Located within the RISK Function of BNP Paribas (BNPP), the role of the Data Protection Correspondent (DPC) is to ensure that the components of the operational risk management framework are implemented and operating effectively within ISPL, and to provide RISK ORM management and Business senior management with relevant, synthetic, transparent, exhaustive and consistent information and a front-to-back view of operational risk across ISPL activities.

To achieve this objective, this 2nd line of defense (LOD2) role works closely with RISK ORM Regional and Central teams and with ISPL management and stakeholders. The DPC provides expertise on personal data protection related topics in accordance with the relevant RACI. India DPC must assist India Data Protection Officer (DPO) in supervising the compliance of projects and with legal and regulatory personal data protection requirements throughout the APAC region as well as the Groups and APAC personal data protection policies.

RISK ORM ISPL mandate is to independently challenge and supervise the operational risk management framework of ISPL activities as described in level 2 procedure Organizational framework and governance for Operational Risk Management & Permanent Control Framework.

This includes control framework adequacy checks, independent challenge, proximity with the business and contribution to the sign-off process on key decisions. The DPC is to ensure second level controls by providing the required supervision and assistance to the 1st Line of Defense

Due to the global and regional models applied by the BNP Paribas (BNPP) activities outsourced to ISPL, the role covers the contribution as well to reviews, control testing, analysis and reports carried out under the supervision of the APAC DPO Regional teams.

Responsibilities

To contribute to relevant personal data protection activities realization

To guarantee

To guarantee

To support the implementation of the privacy strategy defined by DPO

To assist

To define

To alert

To contribute

To contribute to operational collaborative activities

To support and assist

To contribute to permanent control actions

To contribute

To contribute

To contribute

To contribute

To ensure professional network development

To participate

To contribute

To collaborate

To assist

To assist

To contribute

To receive, process and advise

To receive, process and advise

To itemize

To contribute

To assist

To contribute

To realize

To ensure

To contribute

* DPO may refer to India DPO or APAC DPO or Business Line DPO as the case may be reflecting a matrix organization while maintaining a direct reporting to the India DPO

Knowledge (Required to exercise the position)

Level *

To know standards and norms about data protection

1

Know-how (implementation of technics, methods, tools to achieve activities)

Level *

Technics

To know how to assess maturity level of the existing facility about Data Privacy

1

Transverse

To have a professional face-to-face or phone discussion with an overseas colleague

1

To prioritize

1

To efficiently manage several topics at the same time

1

To issue advice / recommendation considering every parameter

1

To have an efficient speaking communication

1

Tools

To work with BNP Paribas tools (e.g. Data Protection Hub, RISK360)

2

Behavioral and soft skills

To efficiently multi-task with topics and maintain attention to detail / rigor

1

To issue advice / recommendation considering all parameters

1

To have efficient communication skills (oral & written)

1

To conceptualize / formalize an idea, a process or a project

2

To work as a team / transversally

1

To identify and analyse risks for the activities that are handled

1

To assess, issue an opinion

1

To deploy a strategy and to define an action plan

2

To animate resources and coordinate their intervention

1

To show diplomacy to allow a message to be heard

1

To show conviction, to generate interlocutors acceptance

1

Being able to anticipate and come up with ideas

2

Creativity and innovation

2

To show discretion about delicate and / or confidential topics

1

Ability to manage conflict

2

To integrate multicultural dimension

1

* Level:

Level 1: Deep

Level 2: Intermediary

Level 3: Basic

Specific Qualifications

Legal background with IAPP Certification (CIPP/E) or equivalent

Skills Referential

Behavioural Skills: (Please select up to 4 skills)

Communication skills - oral & written

Attention to detail / rigor

Creativity & Innovation / Problem solving

Client focused

Transversal Skills: (Please select up to 5 skills)

Analytical Ability

Ability to develop and leverage networks

Ability to develop and adapt a process

Ability to understand, explain and support change

Ability to set up relevant performance indicators

Education Level:

Bachelor Degree or equivalent

Experience Level

At least 5 years

Other/Specific Qualifications

Business Skills

1. Data Protection

2. Risk knowledge and awareness

3. Risk anticipation

4. Data quality & Security

5. Regulatory

6. Business analytics

7. New Technologies and Digital Law [IT/IP]

8. IT risk and cyber security .