Data Privacy Manager

About Orica

At Orica, it’s the power of our people that leads change and shapes our futures.  Every day, all around the world, our people help mobilise vital resources essential to progress. Established in 1874, we have grown to become the world leader in mining and civil blasting with a diverse of team of more than 13,000 across the world. 

It’s an exciting time to join us – we are shaping the future of mining through digital and automated technologies, embracing new ways of thinking, pioneering innovation and reimagining the way we work.

About the role

We are thrilled to announce an exciting global opportunity as we seek our next Future Shaper to join us as the Data Privacy Manager based in Lisbon, Portugal.

In this role, you will be part of the Orica Global team, responsible for overseeing Orica’s corporate compliance related to Data Privacy frameworks, activities, and systems. Your primary goalwill be to assess, manage, and mitigate legal, regulatory, and reputational risks impacting Orica’s global operations.

If you are looking to advance your career and have the chance to develop standards that will be applied across Orica’s global structure, this is the perfect opportunity for you.

What you will be doing

Design, implement and maintain a data privacy governance framework and supporting management systems, that will enable compliance with local and global data privacy regulations such as GDPR, Australian Privacy Act 1998, CCPA and other applicable laws. (including local regulatory requirements on registration, reporting, representation, etc.)

Develop and maintain procedures, standards, artefacts, and tools to ensure transparency and embed effective data governance and privacy and which improve quality, reduce risk, deliver compliance and report on progress.

Advise on privacy impacts and risks from technology and business process outsourcing and vendor management guiding consideration of controls that aid data minimisation.

Data Subject Rights Management (Note: In coordination with HR process owners): Assist in responding to data subject requests (DSRs) for access, correction, deletion, or other privacy rights within legal timeframes. Support the management of data access requests, ensuring timely and compliant responses.

Data breaches: Support the investigation and resolution of data privacy incidents and breaches, including coordination of breach notification requirements to regulators (local and international) and affected individuals when necessary. (Note: In coordination with IT/HR)

Maintain up-to-date documentation for the organization’s data processing activities and data protection strategies.

Collaborate with business resources, particularly HR and Legal, to create a data privacy community of practice.

Embed a corporate compliance culture, via data privacy and protection communications and training programs to raise awareness among employees about data protection best practices and legal obligations.

Work effectively with other functional teams to assess corporate compliance risks, including communications, investigations and related programs, to ensure cohesive and comprehensive processes. Specifically:

• • Conducting Data Protection Impact Assessments (DPIAs) for new projects, products, and services, ensuring that data protection risks are identified and mitigated early in the project lifecycle.
  • Review and provide recommendations on DPIAs prepared by different departments.
  • Support the development and maintenance of a ROPA (Register of Processing Activities)
  • Development and maintenance of data retention policy and periods.
  • Conducting regular data privacy risk assessments and audits to identify vulnerabilities and recommend corrective actions.
  • Compliance reporting on data privacy to key stakeholders including GPDR annual compliance assessment.
  • Provide privacy advice and guidance to business units on data protection issues, including third-party contracts and data processing/sharing agreements.

What you will bring

• Education: Bachelor’s in Law, Information Security, or related field (Master’s or certifications like CIPP/E, CIPM preferred).
• Experience: 5+ years in data privacy or compliance, with proven leadership in governance projects.
• Knowledge: In-depth understanding of GDPR, CCPA, and other data protection laws.
• Skills: Strong analytical, communication, and project management skills.
• Certifications: CIPP or CIPM highly desirable.

How you shape and influence others

• Demonstrates courage, resilience, and flexibility.
• Builds trust and models integrity.
• Strong stakeholder management and communication skills.
• High attention to detail and accountability.
• Effective decision-making and problem-solving.

What we offer

As part of a truly global company, you will have the ability to grow and learn in a diverse, collaborative culture. We foster relationships and learning through connected global and local teams, promote flexible and diverse career paths and support the development of your knowledge and skills. 

You will be paid a competitive salary, learn from talented individuals across multiple disciplines and be able to thrive in a safe workplace within a collaborative culture. Ignite your career at a place where your distinct potential can find its home.

We respect and value all

Orica promotes and fosters a culture of inclusion and Equal Opportunity Employment everywhere we operate. We treat our people and applicants with fairness, dignity, and respect, getting the best of everyone’s contributions.

All qualified applicants will receive consideration for employment without regard to race, religion, sexual orientation, gender perception or identity, nationality, age, military or veteran, marital or disability status.