Regulatory Compliance Technical Lead

The Coca-Cola Company is looking for a Technical Lead to facilitate regulatory compliance of current and future privacy regulations in the Asia Pacific (APAC) region. This role will work with Privacy Legal Counsel to understand what process and technology controls are required by prevailing privacy regulations and work with Regulatory Compliance Delivery Lead to prioritize the scope and implement and monitor the appropriate controls in our environment.

This role is responsible for having technical understanding of privacy and cybersecurity controls and the appropriate mitigations where those controls are not applicable. In addition to working with stakeholders in Legal and Legal Services, this role will work with various cross-functional and project teams, with members in HR and People Services, Technology Services, Global Cybersecurity, and Corporate Audit.

This role is an individual contributor with no direct reports. The role will reside within the Legal Services organization and reports to the Head of Legal Services.

**What You’ll Do for Us**

The Regulatory Compliance Technical Lead has duties across 4 key areas:
Strategy Development & Execution
- Collaborate with the Privacy Office to develop the overall strategy to facilitate regulatory compliance across the enterprise
- Manage the delivery of regulatory compliance services across the APAC region
- Participate in continuous improvement activities to refine the strategy, based on risk tolerance models

Platform Services & 3rd Party Vendor Engagement
- Collaborate with business data and process owners, Marketing Services, Data Services, Global Cybersecurity, and Technology Services to understand the data and technology environment to identify the inventory of in-scope assets for privacy regulations and embed data protection controls in business data and processes
- Design and document enhancements and additional data protection controls to meet or exceed regulatory requirements
- Partner with 3rd Party vendors in cases where data and technology assets reside in and/or are managed by external entities
- Establish and manage routines and processes with key stakeholders internally and externally to capture new and retiring assets to maintain inventory accuracy
- Promote the culture of privacy throughout the networked organization and facilitate privacy by design into key processes and technologies

Privacy Compliance & Gap Assessment
- Conduct controls testing and gap assessment of our process and technology environment, against the controls defined by privacy regulation
- Collaborate with key stakeholders across the organization and 3rd Party vendors to facilitate the execution and documentation of technical data protection controls through Privacy tools such as the individual rights management process, privacy impact assessments and 3rd Party risk assessments for data use cases.
- Identify key privacy risks, escalate through risk reporting channels, and lead technical risk monitoring efforts across the enterprise.
- Partner with Regulatory Compliance Delivery Leads to qualify and communicate impacts due to gaps in privacy compliance
- Identify scenarios that require financial investment and work with Regulatory Compliance Delivery Leads and key stakeholders to address as part of Annual Business Planning

Monitoring & Reporting
- Partner with Privacy Office to develop, drive adoption, and maintain awareness of the privacy risk monitoring and testing strategy
- Perform monitoring and reporting activities as defined by the privacy risk monitoring and testing strategy
- Maintain dashboards for monitoring and provide reports showing current and planned privacy compliance levels, based on control testing results
- Develop and deliver communications based on data-driven reports to show privacy compliance levels and mitigations of compliance gaps

**Qualifications & Requirements**:

- Bachelor’s Degree in computer science, engineering, information systems/technology or equivalent required
- Relevant certifications - CISSP, CIPM, CIPP/E, and/or CIPP/US preferred
- 10 to 12 years of work experience in regulatory compliance, audit, technology, and/or related field
- 5+ years of experience with privacy regulations, processes, and or technology controls
- Demonstrate knowledge of the regulatory landscape related to privacy
- Demonstrate knowledge related to testing, managing, and/or operating technology environments
- Experience working in multinational companies with global, cross-functional teams
- Balance between scope, time, and resources to ensure successful project completion
- Demonstrate a risk-based approach when balancing between speed and compliance in ambiguous and complex situations
- Prepare and deliver presentations to key stakeholders at the appropriate level of understanding

**What We Can Do For You**:

- ** Purpose Driven**: Purpose driven approach that empowers our people to protect the environment and communities we serve while delivering