Job Description
Spin, a FEMSA's business unit, is seeking a highly skilled IC4 – Senior Data Privacy Analyst to ensure the protection of personal data in accordance with data privacy laws and company policies. This role involves applying business knowledge, data privacy expertise, and technical skills to manage and maintain the Personal Data Management System (SGDP) and ensure compliance with regulations such as LFPDPPP and GDPR. The Senior Data Privacy Analyst will work with cross-functional teams to address privacy requirements, conduct risk assessments, and implement data privacy initiatives across Spin's Business Units.
Role involves:
- Developing and implementing the data privacy regulatory framework.
- Managing and maintaining the Personal Data Inventory.
- Conducting risk assessments and control evaluations.
- Evaluating the design and compliance of Privacy Notices.
- Monitoring personal data flow and establishing parameters for authorized processing.
- Addressing personal data breaches and privacy requirements.
- Developing training materials and conducting training sessions.
- Addressing authority requests and internal/external reviews.
- Analyzing and evaluating compliance with the rights of personal data subjects.
- Conducting privacy impact assessments.
Requirements:
- 5+ years of experience in privacy and data protection, data security.
- 4+ years of experience in risk management, privacy, security, compliance, operations, auditing, and/or finance.
- Comprehensive understanding of all facets of privacy throughout the data lifecycle.
- Proven experience in creating or managing compliance programs within a technology or financial services context.
- Basic certifications issued by INAI regarding personal data handling in Mexico.
- Familiarity with data privacy laws and regulations (LFPDPPP and its Regulations, GDPR, CCPA).
Role offers:
- Opportunity to work in a dynamic and inclusive work environment.
- Chance to contribute to a leading financial and digital solutions ecosystem.
- Exposure to a wide range of data privacy challenges and initiatives.