PRIVACY AND DATA PROTECTION OFFICER AEROSPACE AND DEFENSE

Gentrian

London

GBP 80,000 - 100,000

Job description

Bullisher is a data-centric fintech solution provider in the aerospace and defense industry for institutional level investors, looking to disrupt and revolutionize a $3 trillion dollar industry. As a startup, we spearhead an industry-leading Blackbox to facilitate and administer trade agreements, driven by our new generation benchmark delivering solutions through innovation with uncompromising agility. We predict trends in the aerospace and government defense entities and the ability to influence actual changes in government policies through innovation. We believe in championing the underdog because no one else does. We’re equally committed to the motivated professionals that make up the Bullisher organization.

JOB DESCRIPTION: As a newly created role, you will play a significant part in crafting the direction, as well as scoping and guiding subjects of data privacy, data protection, GDPR compliance, and the systems and engine lifecycle.

Conducting regular GDPR compliance audits.
Implementing a privacy design approach.
Implementing the mechanisms necessary to retrieve, review, remove, or delete personal data across the BULLISHER ORGANIZATION.

Lead a team of 9 members including DevOps, data engineers, data scientists, system architects, modeling language engineers, GIS engineers, remote sensing satellite vision, computer vision engineers, cybersecurity engineers, field applications engineers, software engineers, complex systems scientists, control system engineers, distributed control system engineers, machine learning engineers, global operation market reporting officers, telemetry engineers, cyber architect engineers, data migration analysts, and the director of digital science, accountable for all aspects of our new generation of campaign planning and execution applications, engines, and service lifecycle.

Architecture requirements engineering data, project management, development and testing, application management.
Third-party risk management relationship and regulatory management, application and data security.

TECHNICAL MANAGEMENT & RELATIONSHIPS: Carry out risk assessments, especially in the field of international data transfers: e.g., ITAR (International Traffic in Arms Regulations).

Working closely with our legal counsel team and the CTO and CIO.
Serving as the point of contact for data subject requests.
Serving as an official DPO before the relevant data protection authorities.
Participating in finding the best solutions regarding data privacy and security.
Automating discovery and actions: Areas to cover will include automating policies in place and deciding what should happen to data based on sensitivity. Deploying discovery tools to highly sensitive data sources, with policies automatically kicking in and encrypting based on sensitivity.

WHAT WE ARE LOOKING FOR:

Expert in domestic and international privacy, data protection, security compliance, risk, and vendor/third-party risk, ITAR.
Deep experience in highly regulated industries including aerospace and defense sectors, financial services, quantum computing, and significant interaction with defense regulators and auditors.
Must have experience internally (GLBA) and externally (GDPR Schrems-II “Standard contractual clauses”) and cloud supplementary measures.
Must have at least 10 years of experience regarding the regulations and laws that govern ITAR data privacy, including strong encryption and regulations concerning satellites and arms trafficking.

DUTIES AND RESPONSIBILITIES: In this role, you will advise and inform the CTO, CRO, and CIO on data protection and privacy laws throughout all jurisdictions within which BULLISHER OPERATES.

Tracking the lifecycle of personal data within the organization and the risks associated with processing it.
Understanding how GDPR interfaces with other privacy laws which the organization is bound to. Must have at least 10 years of experience regarding the regulations and laws that govern ITAR data privacy, including strong encryption and regulations concerning satellites and arms trafficking.

Participating in subcontract and outsourcing negotiations, including reviewing data protection and privacy provisions and assisting with the drafting of relevant clauses to ensure compliance with data protection and privacy laws and regulations, including the production, implementation, and maintenance of template data processing agreements.
Responding to data protection and privacy breaches internally and externally, including liaison with the relevant authority such as the ICO.
Acting as a point of contact and liaison with data subjects, supervisory authorities, internal teams, suppliers, and any other third party who processes data from BULLISHER.
Responding to subject access requests, including the compilation of SAR responses and liaison with data subjects, ensuring that BULLISHER addresses all queries from data subjects within legal timeframes.
Reporting to the BULLISHER board regarding monitoring and identification of risks and issues, plus legal updates relating to data protection and privacy.

QUALIFICATIONS REQUIRED: Must hold multiple certifications including CIPP/US, CIPP/G, CCEP, CTPRP, IAPP, CIPT.

TECHNICAL REQUIREMENTS: Understanding of the global data protection regulatory framework with a main focus on GDPR and U.S. data protection regulations.

Understanding the changes and laws in ITAR (International Traffic in Arms Regulations).

INTERVIEW PROCESS:

STAGE 1: COGNITIVE ABILITY TEST
STAGE 2: COGNITIVE ASSESSMENT SCREENING: WITH A 30+ YEARS EXPERIENCE PSYCHOLOGIST:
STAGE 3: PRE-SCREENING (verification checks & security clearance)
STAGE 4: INTERVIEW WITH THE CEO, CTO & GC