Data Protection Officer - UK
London
<div class="content-intro"><p>Boku Inc. (BOKU.L) is the leading global provider of local mobile-first payments solutions. Global brands including Amazon, DAZN, Meta, Google, Microsoft, Netflix, Sony, Spotify, and Tencent rely on Boku to reach millions of new paying consumers who do not use credit cards with our purpose-built payment network of more than 250 local payment methods that reach 7 billion accounts across 65 countries. Every year, Boku processes over $9 billion in value for our customers. Incorporated in 2008, Boku is headquartered in London and San Francisco and has employees in over 39 countries around the world, including Brazil, China, Estonia, Germany, Ireland, Japan, Singapore, and the UAE. Boku is a truly global company that takes pride in its diversity and thriving equal opportunity workplace.</p></div><p><span style="font-weight: 400;">Boku is the world leader in local payments, enabling consumers to buy goods and services with nothing more than their mobile phone number, digital wallet or bank account. We reach over 5 billion consumers all over the world and process billions of dollars a year in transactions. We're looking for an experienced Data Protection Officer to join our team.&nbsp;</span></p> <p><span style="font-weight: 400;">In this role you will be responsible for providing oversight into Boku Data protection framework. The person appointed will be part of the Information Security Team and responsible for defining and embedding best practices and will report to the board of the relevant entities for which they are appointed as Data Protection Officer. Boku is a global company with tech offices in the United States, United Kingdom, Germany, Singapore, Ireland and India.</span></p> <p><span style="font-weight: 400;">Roles and Responsibilities</span></p> <ul> <li><span style="font-weight: 400;"> Internal champion for data protection within the business.</span></li> <li><span style="font-weight: 400;"> Working as a point of contact between an organisation and the relevant data protection </span>supervisory authorities.</li> </ul> <ul> <li><span style="font-weight: 400;"> Acting as Data Protection Officer for the Boku Group and its respective entities.</span></li> <li><span style="font-weight: 400;"> Keeping up to date with changes in data protection law and regulations and leading the </span>implementation of any required changes.</li> </ul> <ul> <li><span style="font-weight: 400;"> Consistently informing and advising Boku on governance, accountability and non-compliance </span>risk.</li> </ul> <ul> <li><span style="font-weight: 400;"> Training employees on all relevant GDPR and code of practice requirements.</span></li> <li><span style="font-weight: 400;"> Preparing responses / completing questionnaires outlining the Boku Group’s position on data </span>protection queries.</li> </ul> <ul> <li><span style="font-weight: 400;"> Reviewing and negotiating data protection elements in agreements with partners and </span>prospective partners.</li> </ul> <ul> <li><span style="font-weight: 400;"> Conducting regular audits and assessments to ensure compliance.</span></li> <li><span style="font-weight: 400;"> Drafting, maintaining and updating data protection policies, notices and intra-group data </span>processing agreements s.</li> </ul> <ul> <li><span style="font-weight: 400;"> Maintaining records of all company-wide data processing activities.</span></li> <li><span style="font-weight: 400;"> Replying to data subjects to educate them on how their personal data is stored, secured, and </span>used by the company.</li> </ul> <ul> <li><span style="font-weight: 400;"> Responding to data subjects access requests as and when necessary.</span></li> <li><span style="font-weight: 400;"> Performing DPIA’s and reviewing data processing agreements with vendors and Boku’s customers. </span>Developing templates for data collection, assisting with data mapping, vendor management <span>reviews and RFIs.</span></li> </ul> <ul> <li><span style="font-weight: 400;"> Assisting / advising in the design of data flows to meet data residency / sovereignty </span>requirements.</li> </ul> <ul> <li><span style="font-weight: 400;"> Emerging markets work.</span></li> </ul> <p>&nbsp;</p> <p><span style="font-weight: 400;">Person Specification:</span></p> <ul> <li><span style="font-weight: 400;"> Education and experience:</span></li> <li><span style="font-weight: 400;"> Previous roles as a Data Protection Officer</span></li> <li><span style="font-weight: 400;"> Ideally, a degree or high-level qualification in law</span></li> <li><span style="font-weight: 400;"> One or more data protection qualifications such as EU-GDPR-P, CIPP/E etc</span></li> <li><span style="font-weight: 400;"> Experience in the finance and payments industry</span></li> <li><span style="font-weight: 400;"> Ability to work independently yet also be a strong team player</span></li> <li><span style="font-weight: 400;"> Excellent communication (verbal and written) and interpersonal skills</span></li> <li><span style="font-weight: 400;"> The ability to maintain a high degree of confidentiality, trust and credibility</span></li> <li><span style="font-weight: 400;"> Calm, controlled and resilient demeanour</span></li> <li><span style="font-weight: 400;"> Capable of dealing with complex issues using advanced problem-solving and diplomatic </span>skills</li> </ul> <p>&nbsp;</p> <ul> <li><span style="font-weight: 400;"> Required Skills:</span></li> <li><span style="font-weight: 400;"> An in-depth knowledge of data protection laws and frameworks</span></li> <li><span style="font-weight: 400;"> An ability to think strategically, assess risks and explain the potential consequences</span></li> <li><span style="font-weight: 400;"> Experience in drafting policies, interpreting legal contracts and report writing</span></li> <li><span style="font-weight: 400;"> Excellent communication and presentation skills</span></li> <li><span style="font-weight: 400;"> Knowledge of IT and cyber security and ISO certifications</span></li> <li><span style="font-weight: 400;"> Ability to work with technical and non-technical staff</span></li> <li><span style="font-weight: 400;"> Ability to understand modern Cloud technologies and data sets and how they relate</span></li> </ul> <p><span style="font-weight: 400;">Boku data protection framework</span></p> <ul> <li><span style="font-weight: 400;"> Experience working with technical teams is a must</span></li> <li><span style="font-weight: 400;"> Sufficient commercial awareness to understand, manage and navigate internal and </span>external stakeholders’ expectations</li> </ul> <ul> <li><span style="font-weight: 400;"> Project management skills to successfully manage a portfolio of project with competing </span>priorities</li> </ul> <p><span style="font-weight: 400;">Desired Skills</span></p> <ul> <li><span style="font-weight: 400;"> Knowledge of ISO 27001:2013 requirements</span></li> <li><span style="font-weight: 400;"> Ability to discuss data protection and Cybersecurity requirements</span></li> <li><span style="font-weight: 400;"> Knowledge of other worldwide data protection laws</span></li> </ul> <p>&nbsp;</p>