Data Protection

About the Company
Mitsubishi UFJ Investor Services and Banking (Luxembourg) S.
A. (MIBL) is a Bank incorporated in Luxembourg and is fully owned by Mitsubishi UFJ Trust and Banking Corporation, member of the Mitsubishi UFJ Financial Group, one of the largest financial groups worldwide. MIBL provides a wide range of financial services to institutional investors including depositary, custody, fund administration and other banking-related services.

About the Role
Joining a team of dedicated and experienced people, you will be an important team member of the Data Protection Office/Legal Department and you will assist the group Data Protection Officer with the Bank’s Data Privacy matters as specified hereafter. Responsibilities Initiate, review and monitor data protection assessments, working with the business to get these completed and exercise diligence during review; Identify, prioritise, and work towards mitigation of data protection risks identified through assessments; Provide guidance on artificial intelligence initiatives from a data protection point of view; Participate in committee meetings and initiatives to enhance privacy by design and default in new and existing products; Administer, develop and enhance of the OneTrust application; Monitor updates to data protection laws, information security laws and guidances, conducting gap analysis against data protection policies and procedures and working with the business to close out gap’s identified; Compile training materials in relation to Data Privacy, administering roll out and track to completion; Provide input to board reports, committee reports, forums, policies and procedures, as well as any adhoc materials as required; Contribute to the drafting, maintenance and distribution of privacy notices, sub-processor lists, data protection policies and procedures; Respond to client / regulator information requests – Request for Proposals, Due Diligence Questionnaires, ad-hoc requests, audits etc. ensuring that source material is kept up to date and accurate; Provide input pertaining to data protection clauses in client and vendor contracts; Assist with the review and assess the likelihood and severity of personal data breaches and provide guidance to the business in line with legal requirements; Assist with responding and administering of data subject rights exercised. Qualifications Have experience of working in data protection for at least 2 years, preferably in a Compliance or Risk department and/ or Financial Services; Knowledge of a depositary bank and administrator of any Luxembourg investment vehicle, notably under AIFMD and UCTIS will be considered an asset; Have a relevant degree or other third level qualification; Relevant data protection certification such as IAPP CIP M/E, other certifications will be considered an asset; Have knowledge and experience with data protection laws such as the GDPR, Luxembourg Data Protection Act, etc.; Good communication and team-working skills; Working diligently and to a high standard, maintaining a high level of integrity, trust and confidentiality; Strong organisational/ planning skills with excellent attention to detail and an ability to work within a team and independently prioritising tasks as required in order to meet deadlines; Have experience in writing and improving policy, process and other documentation related to Information Security & Privacy; Experience with OneTrust application desired or willingness to obtain relevant qualifications; Ability to work in an occasionally high volume of work environment; Fluency in English and French, both verbally and in writing is mandatory. All other languages will be considered as an asset. Pay range: 74K
- 82K