Privacy Specialist

Based in Tokyo, the Privacy Specialist supports privacy-by-design activities for services and products. The role responds to inquiries and requests from business and engineering teams, understands their business use cases, identifies applicable data protection laws and related obligations, and conducts privacy risk assessments. The assessments are used to determine risk treatment plans for services and products.

The specialist independently manages privacy-related projects and workstreams, including specific Privacy Impact Assessments (PIAs), data mapping exercises, and privacy notice updates. Work is expected to align with business objectives and operational efficiency. The role also maintains clear and transparent documentation so stakeholders remain aligned on status, decisions, and responsibilities.

Responsibilities include developing, operating, and improving modules of the privacy program. These modules include internal privacy policies, procedures, and processes for data mapping, PIA management, and data breach management. The specialist drafts, amends, and improves privacy notices and reviews privacy-related contracts, including data processing agreements (DPAs) and standard contractual clauses (SCCs).

The role also coordinates with other Toyota group companies to implement privacy controls across the group. Requirements include fluent spoken and written English and at least two years of privacy experience or relevant experience in areas such as compliance, data governance, or information security.