Privacy Specialist

=========================================================================

Complying with global data protection laws is already a challenge in our progressive environment, but our desire goes further. Our privacy team at Woven by Toyota enables our businesses to create mobility that people can enjoy and trust by embedding privacy into the designs and operations of our organizations, products, and services.

We are looking for an experienced Privacy Specialist with a hands-on approach, who is able to work independently as well as within a team. You will report to the Privacy Manager and work with diverse team members such as other privacy specialists, project managers, business analysts, legal specialists, security specialists, engineers, HR, PR and so on to put privacy into every day operations. Our Privacy team demands high standards. Passion for privacy, teamwork and discipline are important drivers to deliver results.

Respond to inquiries and requests from business and engineering teams as part of our privacy-by-design processes

Understand the business use cases, identify applicable data protection law(s) and corresponding obligations, and conduct privacy risk assessment to determine risk treatment plans for our services and products  

Independently manage privacy-related projects or workstreams (for example: specific PIAs, data mapping exercises, or privacy notice updates), ensuring that outputs align with business objectives and operational efficiency

Maintain clear, transparent documentation to keep stakeholders aligned on status, decisions, and responsibilities

Develop, operate and improve different modules of our privacy program, including internal privacy policies, procedures and processes such as data mapping, PIA (Privacy Impact Assessment), and data breach management

Draft, amend, and improve privacy notices

Review privacy related contracts such as data processing agreements (DPAs) and standard contractual clauses (SCCs)

Align with other Toyota group companies to implement group-wide privacy controls

Fluency in English (both spoken and written)

At least 2 years of work experience in the privacy domain, or other relevant experience (e.g. compliance, data governance, information security)

Understanding of laws, regulations, policies and industry standards relevant to privacy

Communication skills allowing you to explain privacy topics in an easy manner

Interpersonal soft skills to work with diverse stakeholders

Ability to independently conduct most privacy-by-design reviews for products and services, seeking guidance from your supervisor or other team members for more complex or novel cases

Proficiency in Japanese

Privacy certifications such as CIPP, CIPM, and/or CDPSE

Work experience in an international, diverse and dynamic environment

Understanding of technology, such as information security, cloud computing, machine learning, etc.

Experience dealing with regulatory authorities

=========================================================================