Copy of Data Privacy Compliance Specialist at AECOM2

The role supports the data privacy initiatives of Global Business Services and ensures alignment with all applicable regulations. The position is responsible for helping maintain compliance with data privacy policies and legislation, performing self-audits, and managing key data privacy documentation. The role contributes to building a strong privacy culture by supporting operational processes and ensuring that data handling practices meet organizational and regulatory standards. • Support Global Business Services across all locations in completing end‑to‑end Records of Processing Activities (RoPA) and conducting data protection assessments (DPIA, TIA, LIA) in alignment with regulatory requirements, internal standards, and service expectations. • Support the execution of data privacy self- audits to ensure compliance with regulations. • Monitor compliance with data privacy policies and regulations, reporting any issues or breaches. • Assist in maintaining and updating data privacy procedures. • Translate regulatory, legal, and policy guidance into operationally usable assessments and outputs. • Proactively identify and contribute to the continuous improvement of templates, tools, guidance documents, and assessment practices . • Help identify potential data privacy risks, assess and recommend proportionate mitigation measures or support the development of mitigation strategies. • Analyzes issues and identifies solutions using established techniques and recommends approaches for new or complex issues. • Work with various stakeholders to ensure data privacy standards are upheld and needs are supported. • Assist in the development and delivery of training programs on data privacy. • Handle moderately complex to complex  or sensitive processing activities with a high degree of independence. • Lead and support key projects, audit reviews, activities, and documentation. • Manage and organize data privacy documentation, ensuring accuracy and accessibility. • Handle administrative tasks related to data privacy, including scheduling, reporting, and record-keeping.