Housh Eissa Legal Job Listings

Indeed

Data Protection Specialist

**DATA PROTECTION ANALYST** Building Data Protection Governance Programmes by Implementing and Maintaining ISO Management Systems Such as ISO/IEC 27001 and Others, with an Emphasis on Data Privacy Compliance. **Alexandria, Egypt (San Stefano)** Job Type: Fulltime Reports to: Senior Data Protection Analyst Allendevaux \& Company is seeking a hardworking and motivated individual to join the data protection team. As a data protection analyst, the role is an exciting opportunity to build policies and procedures to support the data protection programmes of several multinational companies. You will be an integral player in helping customers prepare for and undergo audit, maintain ISMS programmes, assist with data subject requests, provide updates regarding legislative and regulatory changes, perform risk assessments and more. **Personal Characteristics and Skills** \> Must have exceptional English\-speaking skills. \> Comfortable as a self\-starter, able to dig into the pile of tasks needing worked. \> Comfortable with ambiguities that need problem\-solving. \> Effectively educates, evangelizes, and promotes data protection best practices. \> Firmly understands impact of global data protection requirements. \> Drives programmatic goals while building close relationships with business partners. \> Organized, responsive, and persistent with good follow\-through; customer service oriented. \> Demonstrates initiative, passion, and resourcefulness. \> Maintains a strong work ethic and a high degree of accountability. \> Effectively balances competing priorities in a rapidly growing, fast\-paced environment. \> Passionate about data protection and building a culture of data protection. \> Maintains a sense of humor. **Responsibilities** As a Privacy Analyst on the data protection team, you will: \> Analyze and evaluate compliance with relevant data protection regulations, standards, and frameworks (e.g ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018\) to help ensure customers continue to embrace best\-in\-class practices. \> Assist with breach processes and facilitate breach notifications. \> Develop, maintain, and evolve privacy programs to manage privacy inquiries and requests for access to personal information internally and externally. \> Review marketing and HR data collection practices and help embed in them Privacy by Design principles. \> Maintain GDPR Article 30 Records of Processing. \> Assist with the administration of data processing agreements (DPA), standard contractual clauses (SCCs) and BCR process for the transfer of personal data. \> Participate in ISO/IEC 27001 audit prep, internal audit and external third\-party audit. \> Conduct supplier vetting activities. \> Maintain asset registers. \> Facilitate management security review meetings. \> Monitor and maintain effective measures of controls. \> Interface with the cybersecurity team in their role of conducting vulnerability scanning and penetration testing. \> Assist with security and compliance questionnaires. \> Help monitor data collection practices, investigate and document how data is shared within an organisation’s ecosystem, and maintain data protection policies. \> Conduct data protection impact assessments (DPIAs) for new and existing processes, services, and applications. \> Assist with overseeing and appropriately responding to internal/external audits of data protection processes and procedures. \> Intake, triage, and analyze reported data protection incidents to ensure appropriate escalation to the team for rapid response and remediation. \> Support the integration of acquired companies and technologies through data protection due diligence. \> Advise on complex data protection best practices through consistent analysis, feedback, and follow\-through with internal business partners. \> Support the development of data protection infrastructure and process automation across the enterprise. \> Develop data protection awareness campaigns and training programs. \> Represent the team in day\-to\-day activities across business, legal, and technology business partners. **Minimum Qualifications** \> Bachelor’s degree at a minimum; but an advanced degree is preferred. \> 3\+ years professional experience in a role involving privacy compliance. \> Must have privacy or security certifications such as CISSP, CIPP, CIPT, CIPM, CISA, CIPP/E, CIPP/US, or other relevant certifications in good standing. \> Deep knowledge of global data protection laws is helpful, including standards, and associated frameworks (e.g. GDPR, CCPA, HIPAA, and others). \> Strong track record of working collaboratively with cross\-functional teams. \> History of managing privacy programs relating to web, advertising, and analytics technologies and practices (e.g. cookies and other tracking technologies). \> Expresses complex ideas in easily understandable ways. \> Strong technical understanding of data ecosystems and the technology that powers them. \> Demonstrated ability to analyze sophisticated privacy and security concepts and apply them to real\-world situations. The role will report directly to a senior data protection analyst. The most equipped candite will have experience implementing and undergoing audit across several management systems. The most important management system is ISO 27001, followed by others such as ISO 27017, 27018 and 27701\. The best candidate will also be experienced with risk management policy and practice that adheres to ISO 27005 and/or 31000\. **Location of Job Opportunity:** The office is located within the Regus Business Center at 161 Abdel Salam Aref Street, San Stefano, Alexandria, Egypt. You will be working with other team members. You can sometimes work remotely (as arranged with your manager) from your home office; it must be equipped with stable Internet and minimal background noise disruption. **Working Hours:** This opportunity supports customers in the EU, UK and US. As an average, be prepared to work 11:00am to 8:00pm Egypt Standard Time, with a break for lunch, although flexibility will be needed as occasionally you may need to work a little later when meeting with US colleagues. **Paid Time Off:** Paid\-time\-off (PTO) is four weeks and can be spent for any purpose such as national or religious holidays, vacation, sick leave, etc.

6X84+33W, Nady Somoha Al Ryadi, عزبة سعد، Sidi Gaber, Alexandria Governorate 5432080, Egypt