Data Protection Manager

Koç Üniversitesi

Koç University is seeking a Data Protection Manager who will lead our compliance with Data Privacy regulations and serve as the designated DPO (Data Protection Officer) as required. Candidate must communicate effectively with members from all levels of the University to educate, guide, and inform of our obligations to protect personal data. The successful individual will also engage in any incident where privacy may have been violated and take an active role to ensure that our disclosure and reporting requirements are fulfilled.

QUALIFICATIONS

• Bachelor’s degree in Computer Engineering, Information Systems, Law or related fields. 
• Relevant certification (CIPP, etc) is preferred
• Expertise in KVKK, European, and international data protection laws and practices and an in-depth understanding of the KVKK, GDPR, CCPA, and similar regulations
• Experience in data protection program management
• Familiarity with privacy and security risk assessment and best practices, privacy certifications, and information security standards certifications
• Sound understanding of and familiarity with information technology, infrastructure, and information security practices and audits
• Adequate self-awareness and confidence to acknowledge knowledge gaps and seek to fill them from reliable sources
• Sufficient understanding of the processing operations carried out, as well as the information systems, and data security and data protection needs of the University
• Ability to handle information and business affairs with secrecy and confidentiality as appropriate
• Demonstrated leadership and project management experience
• Flexibility in work schedule as needed 
• High commitment to excellence, collaboration, team achievement
• Exceptional communication (written and verbal) and presentation skills in both English and Turkish
• No military obligation for male candidates 

 JOB DESCRIPTION

• Develop, implement, and maintain a data privacy program in accordance with KVKK and GDPR and other relevant international data protection regulations
• Inform, advise and issue recommendations to the University regarding data privacy and protection compliance
• Actively collaborate and coordinate with all stakeholders in the event of a data breach or other incident
• Manage internal and external privacy compliance audits
• Foster a data protection culture within the University and help to implement essential elements of the KVKK, such as the principles of data processing, data subjects’ rights, data protection by design and by default, records of processing activities, security of processing, and notification and communication of data breaches
• Conduct data protection impact assessments (DPIAs)
• Draft policies and standard operating procedures related to privacy and data storage
• Serve as the point of contact between University and all relevant data protection authorities
• Provide regular data protection-related training of regulations and company procedure updates to stakeholders
• Monitor performance and providing advice and reports on the impact of data protection efforts to stakeholders at all levels
• Maintain comprehensive records of all data processing activities conducted by the University, including the purpose of all processing activities
• Interact and communicate effectively with data subjects to inform them of how their data is being used, their rights to have their personal data erased, and what measures the company has put in place to protect their personal information
• Staying current of events and developments in the InfoSec and Privacy domains
• Recruit, hire, manage and evaluate direct-report staff
• Drive the planning, execution, documentation, communication, evaluation, and continuous improvement of the resources and services offered by the Data Protection Unit