Role Introduction
Report to : Data Protection Manager
In this role, you will be part of a team which supports the Data Protection Officer (DPO) team of the Cathay Pacific Group in ensuring compliance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the EU General Data Protection Regulation (GDPR), the Personal Information Protection Law (PIPL) and other relevant data protection laws across all regions in which the Cathay Pacific Group operates.
This is a great opportunity for a driven, motivated and hard-working individual to be part of a team with responsibility for a global data privacy compliance program and its implementation in practice. This role will give the successful candidate the opportunity to work in a fast-moving and cutting-edge field, within an exciting and multifaceted airline business.
The successful candidate will work out of Cathay Pacific Group’s offices in Hong Kong, and will work closely with a wide range of Cathay Pacific Group business units, including Procurement, IT, Digital, and People.
Key Responsibilities
- To support the DPO team in managing the third-party privacy risk related procedures. Including to independently review and assess responses provided by third parties through pre-onboarding questionnaires, as well as alerts provided by the pre-onboarding screening system.
- To independently draft, review, and negotiate privacy-related contracts or clauses (e.g. Data Protection Addendums or DPAs), as requested by the Data Protection Manager
- To support the development, and management of internal policies and compliance processes for DPAs, third-party privacy risk, individual right management, and data incident response.
- To independently implement and monitor internal policies and compliance processes for DPAs, third-party privacy risk, individual right management, and data incident response.
- Independently investigate privacy incidents and follow-up the related activities, as requested by the Data Protection Manager.
- Independently coordinate responses to individual rights requests (e.g. access, deletion, rectification, opposition, etc.), as requested by the Data Protection Manager.
- To independently advise on the response of law enforcement data requests (e.g. Police requesting passengers’ data), as requested by the Data Protection Manager.
- Promote strong data protection standards through conducting training and awareness sessions to various Business Units and Outports.
- To independently provide training and raise awareness across the Cathay organisation on all matters listed above, as requested by the Data Protection Manager.
- For applicants without the required legal qualification, will be considered as a Data Protection Lead
Requirements
- A proven interest in global data protection laws and practices, with a focus on PDPO, GDPR, PIPL and other relevant data protection laws in which Cathay Pacific Group operates, and a strong desire to learn how these regimes relate to both customer and employee personal data.
- Law degree with 3+ years of experience specialising in data protection and privacy and holding privacy-related certifications (e.g. CIPM, CIPP), OR a 3+ year PQE data protection lawyer with experience gained in a reputable law firm. In-house experience in an organisation that has substantial personal data operations is preferred.
- High proficiency in office applications (including Word, PowerPoint and Excel).
- Fluent spoken and written English, Cantonese and Putonghua.
- Experience in using OneTrust and / or other privacy management software is advantageous.
- Excellent communication and presentation skills and ability to interact with a wide range of stakeholders.
- High attention to detail, and able to see and understand the bigger picture.
- Extremely well organised and good at planning and managing his/her time as well as others.
- Ability to work flexibly and on multiple tasks.
- Mature and has a high sense of responsibility and accountability for their work.
- Excellent team player and able to work with people at all levels across the organisation.
- For applicants without the required legal qualification, will be considered as a Data Protection Lead
Personal & Application Information
Cathay Pacific is an Equal Opportunities Employer. Personal data provided by job applicants will be used strictly in accordance with our personal data policy and for recruitment purposes only. Candidates not notified within eight weeks may consider their application unsuccessful. All related information will be kept in our file for up to 24 months. A copy of our Personal Information Collection Statement will be provided upon request by contacting our Data Protection Officer.
