Privacy Specialist

TEAM

Complying with global data protection laws is already a challenge in our progressive environment, but our desire goes further. Our privacy team at Woven by Toyota enables our businesses to create mobility that people can enjoy and trust by embedding privacy into the designs and operations of our organizations, products, and services.

WHO ARE WE LOOKING FOR?

We are looking for an experienced Privacy Specialist with a hands-on approach, who is able to work independently as well as within a team. You will report to the Privacy Manager and work with diverse team members such as other privacy specialists, project managers, business analysts, legal specialists, security specialists, engineers, HR, PR and so on to put privacy into every day operations. Our Privacy team demands high standards. Passion for privacy, teamwork and discipline are important drivers to deliver results.

RESPONSIBILITIES

Respond to inquiries and requests from business and engineering teams as part of our privacy-by-design processes
Understand the business use cases, identify applicable data protection law(s) and corresponding obligations, and conduct privacy risk assessment to determine risk treatment plans for our services and products  
Independently manage privacy-related projects or workstreams (for example: specific PIAs, data mapping exercises, or privacy notice updates), ensuring that outputs align with business objectives and operational efficiency
Maintain clear, transparent documentation to keep stakeholders aligned on status, decisions, and responsibilities
Develop, operate and improve different modules of our privacy program, including internal privacy policies, procedures and processes such as data mapping, PIA (Privacy Impact Assessment), and data breach management
Draft, amend, and improve privacy notices
Review privacy related contracts such as data processing agreements (DPAs) and standard contractual clauses (SCCs)
Align with other Toyota group companies to implement group-wide privacy controls

MINIMUM QUALIFICATIONS

Fluency in English (both spoken and written)
At least 2 years of work experience in the privacy domain, or other relevant experience (e.g. compliance, data governance, information security)
Understanding of laws, regulations, policies and industry standards relevant to privacy
Communication skills allowing you to explain privacy topics in an easy manner
Interpersonal soft skills to work with diverse stakeholders
Ability to independently conduct most privacy-by-design reviews for products and services, seeking guidance from your supervisor or other team members for more complex or novel cases

NICE TO HAVES

Proficiency in Japanese
Privacy certifications such as CIPP, CIPM, and/or CDPSE
Work experience in an international, diverse and dynamic environment
Understanding of technology, such as information security, cloud computing, machine learning, etc.
Experience dealing with regulatory authorities