This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Privacy Officer is a member of the global Privacy function. The successful candidate will assist in implementing Flight Centre Travel Group's privacy program and policies across the different FCTG businesses. The Privacy function works in collaboration with different areas of the business to ensure compliance with applicable local legislation, implement Flight Centre’s privacy framework, provide advice to the business in data privacy matters, respond to incidents, and help drive change as required.
Job Responsibility:
Undertake all activities to develop, implement and maintain FCTG’s continuous data privacy program, privacy policies, procedures, and documentation, for the processing of personal data
Undertake all actions as required to implement and maintain FCTG’s privacy framework and various privacy programmes of work
Assist in the enterprise's response to privacy-related incidents and other potentially damaging events
Conduct or oversee privacy awareness campaigns, training, and orientation for employees
Process and complete Data Subject Access Requests (DSARs) within statutory deadlines, ensuring accurate and compliant responses
Work with different business areas and provide them privacy advice
Conduct audits and assessments to ensure that FCTG’s privacy requirements are being met
Support bid-writing teams in RFP responses in relation to data protection matters
Help drive culture change where required
Requirements:
Three+ years of commercial experience in privacy, data protection, privacy law, security, risk management, auditing and/or compliance
Sound business judgment, with the ability to think in a logical manner to give practical advice by balancing business needs with privacy risks
Strong written and verbal communication skills, and the ability to work well with a diverse client base to articulate the importance of customer privacy
Ability to maintain proper documentation, relevant records, and archives in an orderly, transparent fashion
Willingness to travel as required
Being available for incident and emergency handling outside standard office hours, where necessary
Can work as part of a wider team both independently, see what needs to be done and has the initiative to take ownership
Nice to have:
Bachelor's degree in business administration, law, finance, accounting, engineering, science and technology studies, IT or a related discipline or equivalent experience
Experience with privacy management platforms (OneTrust) and business tools (Smartsheet, Adobe PDF, Notion, Visio)
Sound knowledge of EMEA privacy regimes
Familiarity with ISO 27001, NIST or PCI DSS
Familiarity with governance, risk and compliance (GRC) methodologies