Data Protection & Privacy Engineer

This position will be responsible for activities that support developing, implementing, and maintaining elements of data management and compliance goals, strategies, communications, governance models, and plans necessary to establish and maintain the appropriate business and operational strategy for Argo Group data governance and compliance purposes. This includes the development and implementation of data governance, protection, and privacy programs for the protection of data throughout its lifecycle. In addition, the role will work with stakeholders to define the applicable information governance, data protection and data privacy requirements in all of Argo Group's relevant jurisdictions.

Job Description

At Argo, the Data Protection & Privacy Engineer plays a key role within the Argo Security Engineering & Architecture Team. You will develop a strategy and operationalize it to protect data and ensure compliance with global regulations.

Primary Responsibilities:

• Build and document the operational landscape including implementation and monitoring of technical controls to address identified risks.

• Establish plans to protect data and information systems.

• Develop standards for secure and compliant data classification and handling.

• Coordinate technical capabilities to ensure smooth operation of data protection and privacy programs.

• Liaise with business and technology stakeholders on data protection matters.

• Influence positive data protection and privacy outcomes during times of change and transition.

• Further implement and maintain the data protection toolset including data loss prevention and database activity monitoring.

• Maintain inventory of relevant corporate data assets and personal data elements.

• Support critical data protection processes such as subject access requests, data mapping, and cookie compliance.

• Contribute to incident response planning and fulfill breach investigation and response aspects of the plan.

• Fulfill relevant data protection and privacy audit requests.

• Govern relevant processes operated by our service providers and outsourcers.

• Develop and operate reporting capabilities relevant to privacy and data protection.

Qualifications:

• 5 years of experience working with sensitive and confidential information and projects ideally in a global role.

• Certified Information Privacy Technologist (CIPT) or Certified Information Privacy Manager (CIPM) or other certifications, such as CIPP/E CIPP/US, are preferred.

• Experience and/or technical certifications for relevant technologies are preferred - e.g Microsoft Purview Information Protection.

• Must be able to demonstrate knowledge of data protection technologies such as data loss prevention (DLP) and database activity monitoring.

• Hands-on experience with privacy and data protection technologies is preferred.

• Experience with data flow mapping in complex environments is preferred.

• Must be able to articulate a generic set of risks and issues introduced by global privacy and data protection regulations.

• Strong knowledge of data protection technologies such as data loss prevention and database activity monitoring.

• Ability to develop technical capabilities to protect data processed across a wide range of application and infrastructure types.

• Experience using technology to enable compliance with global privacy and data protection regulations.

• Adoption and development of privacy by design principles.

• Excellent organizational skills and ability to operate and communicate effectively while meeting multiple deadlines and completing projects simultaneously.

• Ability to analyze information and construct an action plan tailored to resolve issues effectively and cooperatively.

• Ability to articulate problems in terms of risk and present them to a range of audiences - technical, non-technical, and executives.