Job purpose
At Live Nation Entertainment, our goal is to maintain the trust and confidence of our fans, artists, employees and partners. Combined with maintaining the highest level of data security, our handling of information is designed to put the individual in control, ensuring that we handle their information in a way that best serves them and maintaining the highest level of security. Corporate Information Security & Privacy (CISP) identifies and reduces data protection risk, arming the business with industry-leading subject matter expertise as it builds the future of live.
Reporting to the Director APAC Data Protection Officer, you will be a part of a global, dedicated privacy team advising on privacy issues impacting Live Nation Entertainment's businesses and offerings across the globe. We are about putting on the best experiences possible for our fans and the Privacy team's goal is helping the business develop exciting offerings & products that respect fan security and privacy. You will work directly with the business, including our Product and Technology teams, as well as across shared services such as Legal, Compliance, Information Security & Audit on Live Nation Entertainment activities and regulatory matters.
Role description
Key accountabilities include:
- Conducting Privacy Impact Assessments on new products and services to identify & quantify privacy risks and supporting the business to implement privacy controls.
- Develop scalable and repeatable processes to drive business support efficiency and consistency of privacy advice.
- Own and operate privacy program workstreams, their digitization in OneTrust, and maintaining them as required by either product changes or legal requirements.
- Maintain and draft new guidance and designs to support the business on a variety of topics.
- Develop and lead training and awareness sessions with the business to promote a culture of privacy and advise business leads to understand how privacy requirements affect their area.
- Conduct horizon scanning exercises to identify upcoming changes to law, regulatory guidance or best practice and assess the potential impact to the privacy program and our control framework.
- Foster partnerships with the business as a trusted advisor and subject matter expert and supporting the business with day-to-day ad hoc advice, as needed.
Essential Skills
- A minimum of three years experience in privacy, data governance, risk management or audit.
- Prior experience and working knowledge of data privacy and security laws and regulatory trends affecting the U.S., Canada, Europe and APAC.
- Working knowledge of information security and privacy frameworks (e.g., NIST, ISO 29000 series, FIPPs).
- Proficiency in both English and Taiwanese Mandarin is required to effectively communicate with regional stakeholders and support cross-border collaboration.
- Strong risk management skills, with the ability to identify and analyze data protection risks and controls and deliver pragmatic solutions.
- Experience in managing privacy programs through tooling, such as risk management software.
- Experience of drafting and monitoring adherence to policies, processes and general advice.
- Adaptable, diligent and works with initiative.
- A can-do attitude and excellent communications skills with a proven track record of bringing business stakeholders onside.
- Demonstrable experience prioritizing and managing multiple projects with varying deadlines.
Desirable
- A legal qualification and/or law degree is valuable, but not essential.
- Strong, proven experience using, maintaining and managing privacy programs in OneTrust.
- Privacy qualifications (such as the IAPP CIPP).
- Further qualifications in supporting fields (such as compliance, audit, information security).
- Additional foreign languages a plus.
