Objectives of the Position
- Establish and continuously enhance Data Protection & Cybersecurity Governance Framework in MB China entities and drive cross-entities activities to fulfil the fast evolving China data protection & cybersecurity legislations.

- Lead MB China cross-entities & functions to fulfil regular and ad hoc data governance related requests from authorties and interact with authorities on behalf of MB China.

Task designation
Organization:
• Define specific R&R for data related Official Mandates and departments in MB China entities
• Set up collaboration mechanism and orchestrate cross-entity / cross-functional activities
• Define approval matrix & mechanism for crucial topics

Risk Assessment and Mitigation:
• Drive the timely monitoring of the law & regulation change (with EA & Legal) and conduct preliminary risk assessment
• Ensure the cascade down to related entities & functions to perform further detailed impact analysis respectively, and drive implementation accordingly.
Policy, Guideline & Consultation
• Develop and optimize common applicable policy, guideline, instruction, process, template, toolkit, etc.
• Provide consultation (if necessary) for cross functions and entities to develop implementation guidance and standard.
Training & Communication
• Plan and organize central training & communication regarding data protection to employees
• Provide qualification program for related Mandates and key personnel
• Set up communication mechanism and ensure regular exchange with JVs - BBAC/FBAC
Monitoring and Enhancement:
• Define regular self-assessment approach
• Propose audit as needed
• Obtain and maintain certification
• Handle data security incident and drive remediation
• Drive the optimization measures
• Organize China Cyber Security & Data Board and Circle
• Report to management on regular basis

Interaction with Authorities & data related Associations:
• Lead cross functions and entities to complete regular/ad-hoc reporting/inspection/survey/project etc. as required by authorities
• Communicate with authorities as needed
• Collect insights from data related associations
• Provide input to EA for lobbying