42dot
Senior Security & Privacy Manager
Pangyo (Software Dream Center), South Korea, Remote. Posted a month ago
The role
The Privacy Manager operates the personal information protection system across services and responds to relevant laws, regulations, and certifications. This person reviews personal information and security risks for new services and collaborates with related departments to create a safe service environment.
What you will do
- Manage personal information life cycle including privacy policy and personal information collection, use, and provision and perform PIA
- Review personal information, location information, and autonomous driving laws and respond to ISMS-P/ISO 27001 compliance and certification
- Review personal information and security of new services and systems, and perform regular inspections and improvements
- Respond to personal information leaks and infringement accidents and take follow-up measures
Required qualifications
- 3 or more years of practical experience in personal information protection, information security policy, and compliance
- High understanding of personal information protection laws and regulations
- Experience in responding to ISMS-P certification audits
- Understanding of IT service system structures and Data Flow
- Ability to collaborate smoothly with related departments such as development, business, and legal
Nice to have
- Experience defining and executing tasks proactively in a rapidly changing environment
- Ability to proactively drive work by clearly setting priorities in highly uncertain tasks
- Experience in personal information protection work related to mobility data such as video information and location information
- Possession of related certifications such as ISMS-P, CPPG, CISA, CISSP
- Experience responding to global personal information protection regulations such as GDPR, CCPA
- Understanding of security inspection tools and IT infrastructure/networks
Before you apply
- A 3-month probation period may apply
- Reference checks may be conducted after the interview process with the applicant's consent
- Employment may be canceled if false information is found in the application
About the company
42dot Security & Privacy team performs information protection activities across all areas from internal business systems to mobility services.