Privacy Lead (Senior Security & Privacy Analyst), Nokia (privacy compliance operations and impact assessments)
Led OneTrust privacy operations for SaaS processes, including data mapping to identify personal data usage and the execution of DPIAs to evaluate and mitigate privacy risks. Maintained Records of Processing Activities (RoPA) and ensured regulatory documentation requirements were met for ongoing compliance operations. Owned privacy due diligence for 100+ third-party vendors by reviewing Data Processing Agreements (DPAs) and aligning them with organizational privacy standards. • Performed SaaS personal data mapping in OneTrust • Produced and managed DPIAs and privacy documentation • Collected and validated audit evidence for SOC 2 privacy controls • Managed risk registers, control-effectiveness assessments, and vendor privacy due diligence