Data Risk Manager

Job purpose

The Data & Performance (D&P) organization drives the Company's agenda to delivered Trust Data @ Scale.

As part of this, it also owns the company's data security strategy and initiatives to ensure proper data guardrail is in place.

Aligned to our Code of Conduct, the Trust Charter, and the regulatory landscape, we are seeking an experienced Data Risk Lead with an innovative, agile and pragmatic mindset to secure data flows, architecture, bolster regulatory compliance and future-proof our Data Strategy for existing and emerging threats.

The role will suit you if you have:


* External or internal consulting / advisory experience


* Experience in data risk and data privacy in other parts of SE such as product or digital


* Able to distill complexities into a succinct story for executive (e.g.

1-pager PowerPoint)


* Able to collaborate with vendors, digital, business/ functions, etc.


* Have data analytics, security, or data access knowledge and experience

Duties and responsibilities



* Lead the Data Risk management activity (inc.

focus on Data privacy and protection), governing the rollout of policies, controls, standards and maturity measurement


* Lead key Data Risk & Security Portfolio initiatives, such as our data privacy and protection program


* Support Data Risk governance topics such as data risk assessments, privacy reviews, and data residence or data localization


* Proactively engage the network of Data Officers & Data Domains with respect to Data Risk while providing guidance and mentoring to Data Offices as needed


* Animating innovation and knowledge exchange on data risk best practices, education and awareness initiatives


* Assess, digest, and help division implement emerging data regulations


* Using data and learnings from incidents, assessments and audits to drive our strategy


* Provide dashboard to management visibility of data risks


* Manage ISO 27710 to achieve compliance and drive maturity


* Collaborate and work as a team (internal and external) to achieve team objectives


* Develop and deliver training education and awareness initiatives


* Provide guidance and ensure Business Data Offices' continuous compliance to Schneider Electric security, legal and data privacy policies and standards.

Qualifications

Experience

The candidate is expected to have achieved an industry recognized privacy certification (e.g.

CIPT or CIPP/E) and/or an academic university degree.


* External or internal consulting / IT advisory experience is valuable


* Experience in data security in other parts of Schneider Electric such as product or digital is relevant, including topics such as data classification, or data leakage.


* Able to distill complexities into a succinct story for executive (e.g.

1-pager PowerPoint)


* Risk Assessment & Management skills / Audit capabilities: certifications, crown jewel evidence, BCP on track, post mortem on se...