Data Privacy Engineer/Analyst
About the role
The Data Privacy Engineer/Analyst will support the bank's data privacy program by driving privacy governance, regulatory compliance, privacy-by-design initiatives, and the implementation of privacy technologies. The role involves conducting privacy risk and impact assessments, monitoring privacy-related risks and incidents, maintaining privacy documentation, and collaborating with various stakeholders to strengthen privacy practices. Candidates are expected to have a relevant bachelor's degree and at least 3 years of experience in data privacy or related fields. The position requires strong analytical, communication, and stakeholder management skills, as well as knowledge of privacy regulations and governance frameworks.
Must have
- Bachelor's Degree from a recognized university in Information Technology, Information Systems, Computer Science, Cybersecurity, Information Security, Risk Management, Business, Law, or a related discipline.
- Minimum 3 years of relevant experience in Data Privacy, Information Security, Cybersecurity, Compliance, Risk Management, Audit, Governance, Systems Engineering, Software Development, Data Engineering, or related areas.
- Knowledge of data privacy regulations and privacy governance frameworks.
- Understanding of privacy risk management, privacy-by-design, and data lifecycle management principles.
- Strong analytical, problem-solving, and stakeholder management skills.
- Experience in data protection controls, privacy technologies, and compliance monitoring.
- Effective communication, documentation, and reporting capabilities.
- High level of integrity, confidentiality, collaboration, adaptability, and commitment to continuous learning.
Nice to have
- Relevant professional certifications in Data Privacy, Information Security, Data Protection, Compliance, Risk Management, Cloud Security, or ISO/IEC 27701 will be an added advantage.
- Postgraduate qualifications in a relevant discipline will be an added advantage.
- Experience in privacy assessments, regulatory compliance, data protection controls, privacy technologies, systems integration, or governance frameworks will be an added advantage.
Technologies
- Cloud Security
- Cybersecurity
- Data Engineering
Highlights
Relevant professional certifications and postgraduate qualifications are considered an added advantage. The role supports compliance with the Personal Data Protection Act of Sri Lanka and international privacy standards.