Privacy Specialist

Job description

**About Woven by Toyota** [Woven by Toyota](https://woven.toyota/en) is enabling Toyota’s once-in-a-century transformation into a mobility company. Inspired by a legacy of innovating for the benefit of others, our mission is to challenge the current state of mobility through human-centric innovation — expanding what “mobility” means and how it serves society. Our work centers on four pillars: AD/ADAS, our autonomous driving and advanced driver assist technologies; Arene, our software development platform for software-defined vehicles; Woven City, a test course for mobility; and Cloud & AI, the digital infrastructure powering our collaborative foundation. Business-critical functions empower these teams to execute, and together, we’re working toward one bold goal: a world with zero accidents and enhanced well-being for all. ========================================================================= ### TEAM Complying with global data protection laws is already a challenge in our progressive environment, but our desire goes further. Our privacy team at Woven by Toyota enables our businesses to create mobility that people can enjoy and trust by embedding privacy into the designs and operations of our organizations, products, and services. ### WHO ARE WE LOOKING FOR? We are looking for an experienced Privacy Specialist with a hands-on approach, who is able to work independently as well as within a team. You will report to the Privacy Manager and work with diverse team members such as other privacy specialists, project managers, business analysts, legal specialists, security specialists, engineers, HR, PR and so on to put privacy into every day operations. Our Privacy team demands high standards. Passion for privacy, teamwork and discipline are important drivers to deliver results. ### RESPONSIBILITIES - Respond to inquiries and requests from business and engineering teams as part of our privacy-by-design processes - Understand the business use cases, identify applicable data protection law(s) and corresponding obligations, and conduct privacy risk assessment to determine risk treatment plans for our services and products - Independently manage privacy-related projects or workstreams (for example: specific PIAs, data mapping exercises, or privacy notice updates), ensuring that outputs align with business objectives and operational efficiency - Maintain clear, transparent documentation to keep stakeholders aligned on status, decisions, and responsibilities - Develop, operate and improve different modules of our privacy program, including internal privacy policies, procedures and processes such as data mapping, PIA (Privacy Impact Assessment), and data breach management - Draft, amend, and improve privacy notices - Review privacy related contracts such as data processing agreements (DPAs) and standard contractual clauses (SCCs) - Align with other Toyota group companies to implement group-wide privacy controls ### MINIMUM QUALIFICATIONS - Fluency in English (both spoken and written) - At least 2 years of work experience in the privacy domain, or other relevant experience (e.g. compliance, data governance, information security) - Understanding of laws, regulations, policies and industry standards relevant to privacy - Communication skills allowing you to explain privacy topics in an easy manner - Interpersonal soft skills to work with diverse stakeholders - Ability to independently conduct most privacy-by-design reviews for products and services, seeking guidance from your supervisor or other team members for more complex or novel cases ### NICE TO HAVES - Proficiency in Japanese - Privacy certifications such as CIPP, CIPM, and/or CDPSE - Work experience in an international, diverse and dynamic environment - Understanding of technology, such as information security, cloud computing, machine learning, etc. - Experience dealing with regulatory authorities