Senior Data Risk Manager (Privacy)

Kennedys Risk & Compliance team handles a wide range of partnership and risk and compliance issues for the firm and acts as an in-house legal department assisting with regulatory and professional conduct enquiries. Within this the Data Risk Team specialises in risk to data, privacy and information as well as compliance with associated regulations and best practise globally. This includes keeping abreast of new and emerging risks associated with ever developing technology such as AI., * Act as SME on data protection (GDPR, UK DPA)

• Lead DPIAs and privacy risk assessments
• Oversee the maintenance of risk registers and mitigation plans
• Develop privacy policies and frameworks
• Support ISMS and ISO 27001 alignment
• Lead incident and breach management
• Engage stakeholders and deliver training
• Support AI and emerging risk governance
• Product owner for Surecloud (or equiv) Platform
• Lead and develop team members and deputise for Head of Data Risk as required.

• Strong knowledge of GDPR and global privacy laws inc HIPAA, PIPA and Aus Privacy
• Experience in data risk management and governance
• DPIA and incident management experience
• Understanding of ISO 27001 / ISMS
• Demonstratable experience of assessing AI and Privacy risks
• Stakeholder engagement skills