Executive-Data Privacy

The Privacy Incident & Breach Response Coordinator supports the organisation in managing privacy, security, and data protection incidents involving personal data, including personal data breaches, Data Loss Prevention (DLP) incidents, unauthorised disclosures, data leakage events, and privacy complaints. This role is responsible for assessing privacy impacts, determining regulatory and contractual obligations, coordinating privacy breach response activities, and ensuring compliance with applicable data protection laws, regulations, and internal data protection policies.

The role works closely with Cyber Security, Legal, Compliance, Risk, IT, and business stakeholders to identify incidents involving personal data, assess associated privacy and business risks, manage regulatory and internal reporting requirements, and ensure timely documentation, escalation, investigation, containment, remediation, and closure of privacy-related incidents.

The Privacy Incident & Breach Response Coordinator serves as the central privacy point of contact during incident response activities, ensuring that privacy considerations are incorporated throughout the incident lifecycle. Responsibilities include conducting privacy impact and breach assessments, reviewing DLP alerts and data leakage incidents, evaluating notification obligations to regulators and affected individuals, maintaining incident records and evidence, tracking corrective actions, and supporting continuous improvement of privacy incident management processes.

Educational Qualifications

• Bachelor’s degree in Law, Information Security, Risk Management, Information Technology, , or a related field.
• Privacy certifications such as CIPM, CIPT, CISSP or equivalent are preferred and will be considered an advantage.

Professional Experience

• 2 to 4 years of experience in data privacy, compliance, information security, cybersecurity support, risk management, governance, or related functions.
• Experience supporting or participating in privacy incident management, personal data breach assessments, regulatory reporting, DLP incident management, cybersecurity incident response, or risk management activities.
• Exposure to privacy governance frameworks, regulatory compliance programmes, audits, or information protection initiatives is desirable.

Technical Knowledge

Basic understanding of privacy and data protection regulations, including:

• Digital Personal Data Protection Act (DPDPA) 2023
• CCPA / CPRA /GDPR
• Other applicable data protection and privacy regulations

Understanding of:

• Personal data breach concepts and incident classification
• Privacy risk assessment methodologies
• Data Loss Prevention (DLP) monitoring and incident workflows
• Privacy incident investigation and documentation processes
• Regulatory breach notification requirements
• Information security and cybersecurity incident response concepts
• Coordination with cybersecurity incident response and forensic investigation teams
• Data handling, retention, and information protection principles