Privacy Associate Manager

Overview We Are PepsiCo Join PepsiCo and dare to transform We are the perfect place for curious people, thinkers and change agents. From leadership to front lines, we're excited about the future and working together to make the world a better place. Being part of PepsiCo means being part of one of the largest food and beverage companies in the world, with our iconic brands consumed more than a billion times a day in more than 200 countries. In PepsiCo Mexico is one of the most important consumer products companies in the country. Our product portfolio, which includes 22 of the world's most iconic brands, such as Sabritas, Gamesa, Quaker, Pepsi, Gatorade and Sonrics, has been a part of Mexican homes for more than 116 years. A career at PepsiCo means working in a culture where all people are welcome. Here, you can dare to be you. No matter who you are, where you're from, or who you love, you can always influence the people around you and make a positive impact in the world. Know a little more: PepsiCoJobs Join PepsiCo, dare to transform. Responsibilities The Opportunity The role will support the North Americas markets. Your Impact As Privacy Associate Manager USA your scope would consist of: Standards, framework, controls and policies: Driving and supporting the implementation and integration of and embedding of privacy principles, policies, standards, and controls into standard business processes. Adoption of Global Privacy Compliance Platform: Ensure use and adoption (e.g. by training and/or by leading required multi functional initiatives) by the business of PepsiCo's Privacy Compliance Platform for privacy related governance and operations and where necessary ensure the design of workflows/processes are capable of being incorporated into business-as-usual operations. Privacy Risk Assessments (PIAs) for businesses / functions engaged in data processing: Facilitate the execution and completion of PIAs by business units (BUs) and functional stakeholders, documents remediation plans, monitors their execution and provides appropriate updates to Privacy Councils. This also involves if PIAs trigger a high risk processing activity that may need to be escalated to the sector DPO(s) e.g. via a Data Protection Impact Assessment (DPIA). Communication/Reporting: Working with the Head of CoE and Senior Privacy Operations Manager to develop and maintain reporting metrics (i.e., KPIs, KRIs) and facilitate regular reporting to DPOs and/or Legal and/or Privacy Councils, as appropriate. Connects on a regular basis with key stakeholders across BU and Functions to understand their current and planned data processing activities and communicate applicable privacy operational requirements. Exercises judgment to raise key risk and compliance issues to the DPO and/or Legal and/or the Privacy Councils. Record of Processing Activities: Work directly with BUs and Functions to develop, create and maintain a log of processing activities undertaken by the business. Where necessary manages maintenance of a record of all personal data processing activities (i.e., data inventory). Privacy Management Plan/Playbook: Facilitate the development of processes to ensure PepsiCo implements PepsiCo's Privacy Management Plan/Playbook and CoE procedures. Where necessary, recommend any required enhancements to address changing regulatory requirements or improve operational efficiencies of the CoE. Lead multifunctional initiatives in this regard (e.g. engaging needed areas, following up on needed actions etc). Training and Awareness: Supports in the development of a privacy compliance training programme. Promotes privacy awareness throughout the business and ensuring adequate support is granted to the Sector DPOs in the roll out of a regular cadence of communications to keep privacy on the business agenda. Privacy Councils: Supports DPOs and/or Legal to lead quarterly Regional Privacy Councils as part of the PepsiCo global privacy governance framework, ensuring privacy risk/key privacy matters are raised and escalated appropriately and in accordance with PepsiCo's privacy policies and standards. Qualifications Who Are We Looking For? Bachelor level degree (preferably in information technology/cyber security, data security or law). 6+ years experience. Data Privacy (e.g., EUs GDPR), Regulatory Compliance, Risk Management, Audit, Data Governance experience. Commercial and financial acumen. Technology: Highly proficient with Privacy Compliance Platforms (e.g., OneTrust, TrustArc), ServiceNow, ERP, Content management, Computer, Business Analysis and Project Management. Knowledge of operational management accounting. Internal governance and control skills. Knowledge of data privacy legislative & regulatory landscape. Knowledge of reporting and presentation to various levels of stakeholders including senior level. Communication and col #J-18808-Ljbffr