McKinsey & Company

- Leading complex cross-functional privacy and data risk management projects globally
- Contributing to leadership and guidance to McKinsey in connection with the continued maturation of 
   McKinsey’s privacy program
- Providing advice with regard to data protection impact assessments.
- Developing privacy guidance for leadership in connection with important strategic opportunities 
- Liaising with other McKinsey colleagues to ensure that privacy and data risk management considerations are appropriately identified and addressed as part of new projects and initiatives
- Co-authoring and reviewing of privacy program governance and operational documentation (e.g., policies, guidelines, templates, and FAQs), 
- Reviewing privacy program and performance on an ongoing basis to ensure compliance with law and continued maturation aligned with business and strategic priorities, applicable law and industry best practices
- Serving as a resource and escalation point on privacy matters for colleagues across organization
- Developing privacy training and awareness activities

Data Privacy Manager

IR Audit

•	Designing data privacy governance programme for clients across multiple verticals (banking, TMT, healthcare, retail) and acting as a Data Protection Officer, incl. liaison with regulatory body if needed
•	Conducted data flows mapping and Data Protection Impact Assessments (DPIAs); kept Records on Processing Activities (ROPAs); handled privacy breaches 
•	Assisted with implementation of technology tools (OneTrust); designed best practices to use CRM and marketing automation software (SalesForce, Marketo, Hubspot) in a compliant way 
•	Examples of projects:
•	Re-consideration of data sharing policy for forex brokers network (design of new and revision of existing data processing agreements)
•	Set up of automated marketing practice for a fashion retailer (privacy notices to consumers, data governance, revision of contractual terms with software provider)
•	Assessment of lawfulness of the use of Al and healthcare data in a commercial practice for a telemedicine provider
•	Set up of email campaigns and lead generation practices in line with the regulation for a business training provider
•	Establishing effective internal processes when dealing with data subject's requests for a market research company

Auditor / Data Protection Officer

Led projects for small and medium-sized companies in digital transformation (digital products development, market segmentation, go-to-market strategy, customer journeys, online campaigns, content & visuals creation)

Examples of assignments: 
- Development of digital products for business services provider
- Usage of AI healthcare data products in a commercial practice for a telemedicine provider 
- Set up of digital practice for a fashion retailer
- Set up of automated marketing practice for an e-publishing house
- Set up of email campaigns and lead generation practices for a business training provider
- Web performance audit for coaching services provide

Product & Digitization Strategist

•	Led global cross-business data transformation project in 40+ jurisdictions
•	Defined global privacy and data protection strategy based on regulatory and contractual obligations across EMEA, US and APAC jurisdictions 
•	Drafted and negotiated DPAs with largest Telco & Tech companies in the world (e.g. AT&T, Verizon, Deutsche Telekom, Microsoft, Facebook, Adobe, IBM, HPE etc.) with common negotiating points being responsibility (processor vs controller positions), limitation of liability, indemnity, breach notification, insurance, data transfers, vendor audits, subprocessors engagement
•	Provided comprehensive expertise in data protection laws and practices including GDPR,CCPA, E-Privacy, Privacy Shield, IAPP standards, ICO UK 
•	Delivered policies and operational procedures needed to manage privacy across organization globally
•	Kept record of processing activities; conducted data protection impact assessments
•	Executed rights of data subjects, incl. handling subject access requests
•	Operated in close liaison with senior stakeholders across departments globally to establish partnership and trust when dealing with strategic and highly sensitive issues
•	Shared knowledge with, continually coached and mentored business and functional teams to promote privacy awareness programme
•	Led deliveries from multiple internal & external teams (DevOps, legal, marketing)
•	Delivered trainings for 2000+ employees

Global Data Protection Officer

Société Générale

•	Conducted audit assignments with focus on data protection, IT continuity and business resiliency within SG Group subsidiaries mostly in CEE region
•	Conducted risk assessments and co-designed audit plan for IT operations, cyber security and software development divisions
•	Audit on & Investigation of Cyber Attack over Payment Card Processing across 41 SG subsidiaries 
Scope: Testing authorization system configuration, fraud detection system parameterization and management of card transaction limits; developing recovery strategy and operational procedures; designing maturity model for payment card transactions; defining rules of collaboration between bank and card schemes (Visa, MasterCard) as for stand-in mode processing and cryptographic keys exchange, SLAs with authorization system providers (KPIs, fraud indicators, liabilities), due diligence of third-party providers
•	Audit on General IT Controls and Application Security 
Scope: IT operations, vendor & contract management, information security with regard to extensive external distribution channel, access rights and system controls, incident management & alert handling, security aspects within software development 
•	Audit on the IT Continuity of Critical Customer-Facing Banking Services 
Scope: Testing institution’s infrastructure, incl. production, backup systems on-premises/in remote data centre and mechanisms of restoration of full operational capabilities; testing other business continuity and contingency plans for critical banking operations; deployment of COBIT governance model in IT operations

Senior Internal IT Auditor

Raiffeisenbank a.s.

•	Co-authored the UX/UI of the new internet and mobile banking application, led one of the SW development stream (https://www.youtube.com/watch?v=KeWcBJKz8-s&feature=youtu.be)
•	Product functionality testing, use cases, customer  journeys, metrics, analyses of competitors’ products, market scoping
•	Promoted product functionalities to stakeholders, ensured buy-in across the organization

•	Co-authored business & technical specifications of new multichannel banking platform
•	Responsible for assessing data privacy compliance of internet and mobile applications
•	Mapped data flows within multichannel platform and defined the scope of GDPR applicability together with lawyers at first stage of GDPR implementation
•	Conducted Data Protection Impact Assessments (DPIAs) 
•	Designed processes to help detect and prevent privacy breaches
•	Ensured that new data protection processes and procedures were appropriately documented; extracted and analyzed data to determine deficiencies or non-compliance with laws or internal policies if needed
•	Cooperated with IT security experts and business representatives on design of new user-friendly authentication method for multichannel banking as well as with business analyst and system integrators on concept of API solutions and their impact on customer data security and business model of the bank with regards to PSD2
•	Researched providers of authentication solution in terms of suitability to business and functional requirements and to overall set up within enterprise architecture
•	Reported on findings and made recommendations for management on risk areas

Taplio

Jana S's Linkedin Analytics

Jana S

Want to drive more opportunities from LinkedIn?