Data Protection Officer

Company:

Everest Advisors (Uk), Ltd.

Job Category:

Technology

Job Description:

About Everest:

Everest is a global leader in risk management, rooted in a rich, 50+ year heritage of enabling businesses to survive and thrive, and economies to function and flourish. We are underwriters of risk, growth, progress and opportunity. We are a global team focused on disciplined capital allocation and long-term value creation for all stakeholders, who care deeply about our impact on communities and the wider world.

About the Role:

As the Data Protection Officer, you will play a critical role in developing, implementing, and overseeing our data privacy and protection initiatives. You will collaborate closely with cross-functional teams, especially within our international locations, to ensure that our data handling practices comply with relevant regulations and industry best practices, while fostering a culture of data privacy throughout the organization. The DPO will oversee compliance with local data protection laws, including GDPR, to ensure that data protection controls are regularly tested, monitored, evidenced and enforced. This role will ensure that the risks to the rights and freedoms of data subjects associated with collection and processing of Personally Identifiable Information by European and UK operations of the company are regularly assessed and are minimized.

Responsibilities:

• Act in and fulfill the role of the Data Protection Officer for our international entities.
• Serve as registered point of contact for the data protection authorities acting as the first point of contact for all inquiries.
• Oversee the development and implementation of data privacy and protection policies, procedures, and guidelines globally and in alignment with applicable laws and regulations (e.g., GDPR, CCPA, HIPAA).
• Monitor and assess data processing activities to ensure compliance with privacy laws and contractual obligations, including data transfer mechanisms and third-party data sharing agreements.
• Conduct regular Privacy Impact Assessments (PIAs) or Data Protection Impact Assessments (DPIAs) to identify and mitigate potential privacy risks associated with new or existing projects.
• Ensure that data subject requests such as data access, correction or deletion for individuals whose data is processed (EU and UK: employees, customers etc.), are managed and responded to within the required timeframe.
• Oversee and advise on the implementation of data classification, data mapping and flows, privacy and protection and data retention controls and procedures.
• Oversee and advise on incident response efforts in the event of a data breach, including coordination with internal and external stakeholders, timely notification, and remediation.
• Monitor controls associated with the management, retention and disposal of records are maintained.
• Report quarterly to Everest’s international boards regarding data privacy and protection compliance, control health and risk remediation activities.
• Collaborate with legal, IT, and other departments to ensure that data privacy considerations are embedded in data processing activities, system design, AI initiatives, and data handling procedures.
• Provide guidance and training to employees on data protection regulations and best practices to enhance overall awareness and compliance.
• Establish and maintain records of data processing activities, including data inventories, data flows, and data retention schedules.
• Monitor emerging trends and changes in data privacy regulations to ensure continuous alignment of policies and practices with evolving requirements.