Privacy Specialist

About Woven by Toyota Woven by Toyota will contribute to Toyota's transformation into a mobility company once in a hundred years. Inspired by our history of continuing to invent "for someone other than ourselves," our mission is to expand the definition of mobility, extend the ways mobility contributes to society, and continue to challenge the common sense of mobility through innovation that thinks of people.

We operate around four main pillars: AD/ADAS (Automated Driving/Advanced Driver Assistance Systems) technology, Arene, a vehicle software production platform for SDV (Software Defined Vehicles); Woven City, a mobility test course; and Cloud & AI, the digital infrastructure that supports our collaborative foundation. Additionally, essential business functions support the implementation of these teams, working together as one to realize a "zero accident society" and the "mass production of happiness."

=========================================================================

About the Team

Complying with global data protection laws is already a major challenge in an advanced business environment, but our efforts do not stop there. The Woven by Toyota privacy team embeds privacy into the design and operation of organizations, products, and services, supporting the realization of mobility that people can trust and use with peace of mind.

Ideal Candidate

We are looking for a hands-on Privacy Specialist who actively engages in practical work. We welcome individuals who can proactively drive operations while also working collaboratively with others as a member of a team to achieve results. This position reports to the Privacy Manager and is responsible for integrating privacy perspectives into daily business operations while collaborating with diverse stakeholders, including Privacy Specialists, Project Managers, Business Analysts, Legal, Security Specialists, Engineers, HR, and PR. Our Privacy team emphasizes high quality standards. We are looking for someone with a strong interest in the privacy domain, teamwork, and the ability to approach work with high discipline.

Responsibilities

• Responding to inquiries and consultations from business departments and engineering teams based on Privacy by Design principles.
• Understanding business use cases, identifying applicable data protection laws and obligations, and formulating privacy risk assessments and risk response policies regarding our services and products.
• Driving and managing privacy-related projects (e.g., conducting PIAs, data mapping, updating privacy notices, etc.).
• Preparing documentation to share business status, decision-making matters, role assignments, etc., among stakeholders.
• Building and operating privacy programs, including the formulation, operation, and improvement of internal privacy policies and procedures (data mapping, PIA [Privacy Impact Assessment], data breach response, etc.).
• Creating and updating privacy notices.
• Reviewing privacy-related contracts, such as Data Processing Agreements (DPA) and Standard Contractual Clauses (SCC).
• Introducing and promoting group-wide privacy controls through collaboration with various Toyota Group companies.

Required Qualifications

• High level of English communication skills (oral and written).
• 2 or more years of practical experience in the privacy domain, or work experience in related fields (compliance, data governance, information security, etc.).
• Understanding of privacy-related laws and regulations, internal policies, and industry standards.
• Communication skills to explain privacy-related content in an easy-to-understand manner.
• Interpersonal skills to collaborate smoothly with diverse stakeholders.
• Ability to proactively conduct Privacy by Design reviews for products and services (with the ability to coordinate with supervisors and team members for complex or highly novel cases).

Preferred Qualifications

• Ability to perform work in Japanese.
• Privacy-related certifications such as CIPP, CIPM, CDPSE, etc.
• Experience working in an international and diverse environment.
• Understanding of technology fields such as information security, cloud computing, and machine learning.
• Experience in dealing with or negotiating with regulatory authorities.

========================================================================= Notes ・Typically, all interviews are conducted via Google Meet. ・Job postings are currently listed in both English and Japanese. Therefore, please apply to only one of them. ・When applying, we request that you submit an English resume if possible. Please note that if you submit a Japanese resume for any reason, we may request an English resume during the selection process depending on the position.

Compensation and Benefits ・Salary commensurate with industry standards based on experience. ・Working hours: Flexible working hours. ・Annual paid leave: 20 days per year (number of days in the first year varies depending on the month of joining). ・Sick leave: 6 days per year (number of days in the first year varies depending on the month of joining). ・Holidays: Saturdays, Sundays, national holidays, and other days determined by the company. ・Social insurance: Health insurance, Employees' Pension Insurance, Industrial Accident Compensation Insurance, Employment Insurance, Nursing Care Insurance. ・Housing allowance. ・Retirement allowance system. ・Rental car support. ・Internal training programs (software learning, language learning).

Our Commitment ・We realize equal employment opportunities and respect diversity. ・Personal information provided will be used only for recruitment and onboarding procedures. For details, please refer to our Privacy Policy.