Senior Data Protection Analyst

About Thunes

Thunes is the Smart Superhighway for money movement around the world. Thunes’ proprietary Direct Global Network allows Members to make payments in real-time in over 140 countries and more than 90 currencies. Thunes’ Network connects directly to over 12 billion mobile wallets and bank accounts worldwide, via more than 350 different payment methods, such as GCash, M-Pesa, Airtel, MTN, Orange, JazzCash, Easypaisa, AliPay, WeChat Pay and many more.

Thunes’ Direct Global Network differentiates itself through its worldwide reach, in-house Smart Treasury Management Platform and Fortress Compliance Infrastructure, ensuring Members of the Network receive unrivalled speed, control, visibility, protection, and cost efficiencies when making real-time payments globally. Members of Thunes’ Direct Global Network include gig economy giants like Uber and Deliveroo, super-apps like Grab and WeChat, MTOs, fintechs, PSPs and banks.

Headquartered in Singapore, Thunes has offices in 15 locations, including Barcelona, Beijing, Dubai, London, Manila, Nairobi, Paris, Shanghai, Hong Kong, Miami, Johannesburg, Riyadh, San Francisco and Atlanta For more information, visit: https://www.thunes.com/

As Thunes continues its journey of high growth, we are looking to expand our team with an experienced:

SENIOR DATA PROTECTION ANALYST

Role Purpose:

As a Senior Data Protection Analyst (DPA) you will support the delivery of personal data protection controls and compliance at Thunes. Assisting with the assessment of privacy risks and supporting efforts to maintain the confidentiality, integrity and availability of personal and sensitive data. You will collaborate with teams across the business to help drive a culture of privacy, transparency and compliance.

The role reports to the Group Data Protection Officer within the Legal and Compliance function.

As a Senior Data Protection Analyst, you will play a critical role in building trust with Thunes’ customers, partners and employees by ensuring their personal data is protected and that the company meets all legal and regulatory requirements in respect of data privacy and governance.

Key Responsibilities: 

• Work closely with cross-functional teams to facilitate organisation-wide data inventory and mapping via OneTrust platform.
• Conduct initial reviews of new technologies to identify privacy risks, facilitating Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs) and Transfer Impact Assessments (TIAs).
• Support end-to-end workflow for Data Subject Access Requests (DSARs), Erasure requests and other regulatory rights requests.
• Maintain and update data processing activities (RoPA) to reflect changes in personal data processing and systems.
• Support vendor data protection reviews and contract process where required, to ensure robust third-party processing practices.
• Assist in the investigation and mitigation of personal data incidents or breaches and tracking remedial action.
• Deliver actionable data protection advice to business units, reflecting current regulatory requirements and mitigating privacy risks.

What we are looking for:

Experience

• 3+ years of professional experience advising on data protection and privacy matters, ideally within the international cross-border payments industry.
• Proven track record engaging effectively with stakeholders across all levels in a global environment, to handle a varied workload.
• Detailed understanding of current and emerging global data protection legislation and regulatory updates.
• Knowledge of international data transfer requirements and cross-border payment landscapes.

Skills and Qualifications 

• Proficiency in use of OneTrust platform for data mapping and inventory is essential.
• Exceptional verbal and written communication skills or stakeholder management.
• Highly motivated and confident to work independently, and as part of a team.
• Detail oriented and able to thrive in a fast-paced environment.

Qualifications 

• Bachelor’s degree in a relevant field.
• CIPPE or equivalent training.