Overall objective:
The aim of the Privacy Maturity Uplift Programme is to achieve compliance objectives through Privacy risks reduction and controls uplift across several business entities of the insurer.
Context:
The regulator made some observations about how the insurer handles client data and privacy. The insurer had a team in place to do the work but removed the PM because they were neither proactive, nor capable of proper project management. A replacement was brought in who is perfect, however he is as now taking ‘a job of a lifetime’ elsewhere. He is currently turning the project round and giving it a good basis for success. His exit does not reflect on the client. A replacement PM is required to manage the project on behalf of the sponsor. The sponsor is a lovely person and easy to get on with. The sponsor needs another proactive PM to handle questions and solve problems.
Period: June 2021 to end of April 2022
Work objectives of the lead:
- Understand the landscape and context of Data Privacy requirements (largely Hong Kong PDPO and The insurer Group standards), willing to pickup domain knowledge and work closely with the DPO/Privacy Subject Matter Experts (SMEs) to ensure
- project work are prioritized and arranged sensibly
- deliverables are compliant to regulatory and Group requirements, and
- Messages are effectively communicated to various level of stakeholders in a unified way.
- Manage delivery of the Privacy Uplift Programme across different entities of the insurer according to scope, budget and timeline baselines. Timely manage project risks, issues and dependencies, monitor progress with working groups, and report project status to the Steering Committee as well as other corporate governance parties
- Influence senior executives and leadership teams to obtain necessary support and delivery buy-in, and present Programme status update at various management meetings and forums.
- Proactively direct and manage multiple workstreams for three Hong Kong entities with consistent standards
- Manage project baselines, define and refine detail project plans, formulate communication plans and manage stakeholder relationship, drive cross-team collaboration with technical and business teams, manage internal resources to address constraints.
- Work with cost centres to effectively track program budget versus expense
- Backfill and take on BA and PMO responsibilities should occasion arises and support the taskforce in requirement analysis, identifying control gaps, remediation design/alignment with stakeholders, liaise with Risk & Compliance, and all in-scope business/technical teams to deliver together with the project team (including operationalize the enterprise standards, processes and procedures).
- Promote and deliver campaigns and/or trainings to uplift enterprise awareness and culture on Data Privacy, foster frontline and back-office behavioural change along with the Target Operating Model (TOM), and ensure smooth transition to Business as Usual (BAU)
- Support the Program Sponsor to ensure the successful delivery of the Privacy Uplift Programme across different entities of the insurer.