I&t Data Privacy and Protection Director

NTT is a leading global IT solutions and services organisation that brings together people, data and things to create a better and more sustainable future.

In today’s ‘iNTTerconnected’ world, connections matter more now than ever. By bringing together talented people, world-class technology partners and emerging innovators, we help our clients solve some of the world’s most significant technological, business and societal challenges.

With people at the heart of our success, NTT is committed to attracting and growing the best talent and providing an environment where everyone feels they can belong and their contribution matters.

**Want to be a part of our team?**

The I&T Data Privacy and Protection Director, reporting to the Senior I&T GRC Director will be responsible for supporting the effective implementation and oversight of the DPP programme across NTT’s I&T business. The NTT I&T Data Privacy and Protection Director will work closely with stakeholders in our functions, regions, and service divisions to ensure that appropriate controls, across people, process and technology, are put in place to support compliance with data protection laws and regulations, industry standards and I&Ts DPP policies.

**Working at NTT**

**Key Roles and Responsibilities**:

- Support the Senior Director GRC in establishing and overseeing the DPP programme throughout I&Ts operations, including identifying emerging risks, defining appropriate policies and processes, performing data protection impact assessments and embedding data protection by design, creating go-to-market collateral and engaging with I&Ts stakeholders on DPP matters, and preparing executive and management reports.
- Document and assess DPP risks in the business and develop strategies to manage or mitigate them in collaboration with business stakeholders.
- Work closely with the legal team to ensure that changing regulatory requirements are adopted in the DPP programme and that I&T contracts (including data processing agreements, standard contractual clauses), privacy statements and terms of service accurately reflect I&Ts processing activities, technical and organizational measures, and supplementary measures.
- Support the business to document the record of processing, including applicable data flows and cross-border transfers of personal data, and ensure that this is maintained so that it remains accurate, complete and up to date.
- Support and advise the business in the investigation, response, resolution, notification and closure of personal data breaches in accordance with applicable laws and regulations and NTT’s DPP policies and processes.
- Advise the business and key stakholders on its data protection obligations under applicable laws and regulations and NTT’s policies and standards.
- Monitor developments in global data protections laws and regulations, understand the impact for NTT and put in place appropriate mechanisms to support compliance.
- Provide guidance, training and awareness to key stakeholders on DPP.
- Monitor and evaluate the effectiveness of the DPP programme and achievement of control objectives across our business.
- Maintain your technical expertise by keeping abreast of developments in DPP, participating in industry forums and undertaking continual training and development

**Knowledge, Skills and Attributes**:

- Demonstrates accuracy and thoroughness and high levels of attention to detail.
- Demonstrates strong analytical skills, including the ability to assess risk and impact from a DPP perspective.
- Demonstrates a strong understanding of data protection by design practices and the implementation of data protection by design in technology solutions.
- Demonstrates a pragmatic and risk-based approach to DPP.
- Excellent leadership, creativity, presentation, writing and collaboration skills.
- Excellent written and verbal communication skills (including leadership and no-leadership) and negotiation skills.
- Ability to thrive under pressure, function and deliver effectively in a fast-paced environment.
- Ability to work well independently and productively with mínimal supervision.
- Proactive in approach with high levels of motivation, being a self-starter with good planning and organizing skills.
- Ability to work well in a team environment.
- Demonstrates strong stakeholder engagement skills coupled with the ability to conduct presentations to both technical and non-technical stakeholders.
- Positive role model, demonstrating the ability to coach, inspire and mentor others.
- Strong critical thinking and decision-making skills.
- Ability to critically assess technology solutions to identify potential data protection gaps and opportunities for improvement.
- Strong organizational and project management skills, including the ability to manage competing tasks and prioritize effectively.
- Experience managing complex projects and working alongside cross-functional teams.
- Firm grasp of DPP concerns, best practi