Department Mission

• Ensure that company policies and procedures are in compliance with laws regulations and standards etc.
• Act as the interfaces within company stakeholders, regulators, and relevant public authorities on issues related to data protection
• Evaluate the existing data protection framework to identify areas of no or partial compliance, and rectify any issues
• Support the registration and filing of AI related matters, e.g. AI LLM or AIGC if needed. Support R&D department at the project requirement stage to ensure developed products meet the registration/filing requirements. Promote a culture of data protection and AIGC compliance across all units of the organization

Your Responsibilities:

• Cooperate with Legal/IT and R&D Departments with data protection related projects and topics
• Draft new and amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders
• Deliver training across all business units to staff members who are involved in data processing & AIGC product development.
• Manage data protection compliance gaps identification and mitigation on products, update data protection related risk and mitigation measures
• Document the records of data processing activities and carry out data protection impact assessment
• Organize 3rd party (vendors/partners) data compliance audit, coordinate and prepare the doc/report required by authority
• Support the completion of regulatory compliance procedures for AI related products, e.g. AI LLM, AIGC including algorithm registration/filing, data security assessment.
• Coordinate with the Cyberspace Administration of China and competent industry authorities to ensure all AI related applications e.g. AI LLM or AIGC meet the regulatory requirements.
• Other tasks assigned by senior and/or top management, other tasks assigned by supervisor.

Required Qualification:

• Education: Bachelor’s/ Master’s degree in Legal/Computer Science/Information Technology with data protection related experience.
• Work Experience
  • 3-5 years of experience in data protection compliance or related field
  • Practical experience in project management and operation phase for data protection consulting, support in designing processes in compliance with data protection regulations and conducting technical checks and audits
  • Working experience in legal, consulting firms or MNC, cyber security or data protection related experience is preferred
• Knowledge, skills and abilities
  • Proficient in information protection laws and regulations, such as PIPL, DSL, and CSL etc.
  • Profound knowledge of Chinese cyber & data security control frameworks
  • Ideally a certification as data protection and/or security specialist
  • Project management qualification like PMP certificate
  • Strong with MS Office application (Outlook, Word, Excel, PowerPoint, etc.)
  • High analytical thinking and attention to details needed
  • The ability to multi-task and meet deadlines with minimal supervision
  • Strong interpersonal skills and the ability to effectively communicate, both written and verbally
• Language
  • Chinese and English as working language is a must
  • German language capability is a plus