Robert Griffiths Email & Phone Number

Melbourne, Vic, Au

Melbourne, Victoria, Australia

Managing client-facing cyber security & data protection/privacy projects

Melbourne, Australia

After 10 months working as a Senor Consultant I took a promotion and moved internally to the KPMG Law team, where I supplement the legal advice given by lawyers with non-legal Privacy services. This includes:• Managing client relationships and Privacy projects, reporting on budgets and writing proposals and engagement letters• Managing and developing teams of Consultants and Lawyers to deliver Privacy advice & consultation• Developing privacy service offerings, including third party due diligence procedures, Data Protection/Privacy Impact Assessments (DPIA/PIA) and strategic framework development.Key Clients/Projects• Supported a top Australian university with Privacy gap assessments in key divisions and developed an improvement roadmap based on findings• Providing outsourced Data Protection Officer as a service support to a leading education institution managing breach investigations and reports and conducting PIAs/DPIAs• Supporting the sale and acquisition of an online organisation providing Privacy and Breach Management advice to organisations and the general public by conducting a privacy health check and privacy due diligence activities.• Conducted a data cleansing and masking exercise for a major health organisation to implement privacy by design principles into linked database and limit the flow of data between systems with strict access requirements

Melbourne, Australia

I am responsible for organising Privacy & Data Protection networking and knowledge sharing events on behalf of the IAPP. The events bring together Privacy & Data Protection specialists from multiple industries to discuss and tackle current and upcoming challenges in Privacy, Data protection, Cyber Security, Forensic, Ethics, Data Risk Management & Data Governance.

Melbourne, Australia

KPMG is a professional services firm operating in 153 countries with over 200,000 employees. They specialize in Audit, Assurance & Risk Consulting; Deals, Tax & Legal; Management Consulting; and Innovation & Digital Solutions. As a Senior Privacy Specialist working in the Compliance & Conduct team, my role involves providing audit and advsory services to clients in relation to the Privacy Compliance & Risk Management capabilities and supporting the uplift and remediation programs where agreed.Responsibilities:• Conducting maturity assessments of client Privacy frameworks and reporting observations & improvement recommendations• Conducting PIA/DPIAs and privacy audits, reporting risks & control gaps and drafting remediation plans• Supporting remediation activities, including drafting strategies & frameworks, policies, procedures and delivering workshops• Drafting proposals & engagement letters and reporting on budgets & resourcesKey Clients/Projects:• Developed a bespoke, “best-in-class“, global Privacy framework for one of Australia’s “big 4“ banks• Lead a successful post-breach review and process improvement exercise for one of Australia’s largest department stores who had breached their credit card reporting obligations under part IIIA of the Privacy Act 1988 (Credit Reporting Code), the National Consumer Credit Protection Act 2009 (National Credit Code) and Australian Credit Licensing Terms (ACL).• Conducted Privacy maturity assessments for industries including global automobile brands, food, retail, b2b software and services, local government and healthcare.

Melbourne, Australia

Aesop is a global cosmetic skincare provider operating in 23 countries and counting. Acting as both Project Manager and internal Privacy Officer, the main purpose of my role is to design and manage a project to assess and improve Aesop's compliance with global and local privacy regulations, including the EU GDPR.Key responsibilities:• Supporting a global data protection/privacy project to achieve compliance with data protection/privacy regulations in multiple geographies, including ANZ, Europe, East & Southeast Asia, and the Americas, including Canada, the US & Brazil.• Developing the global compliance function, and identifying and building the required resources for ongoing compliance management.• Developing a global compliance framework, including relevant policies and procedures.• Auditing existing data flows to understand how personal information is currently collected, used, disclosed, handled and destroyed/deleted in relation to the data life cycle.• Assessing the legal bases for data processing activities.• Advising on best practice and assisting the business to implement appropriate technical and organisational measures.• Educating on privacy by design concepts and developing/conducting Privacy Impact Assessments (PIAs) on new or existing projects.• Maintain knowledge of developments in privacy law and practice across all markets Aesop operates in.• Providing ongoing education and awareness via communications, team activities, presentations and eLearning.• Reviewing, managing and recording privacy incidents and requests, such as access, restriction, and deletion.• Recording and managing breaches and reporting high risk incidents to Supervisory Authorities & Data Subjects.• Maintaining relationships and registrations with local Privacy Regulators.• Developing data transfer protocols to enable a global business model.• Reviewing external suppliers and assisting the legal team to update contracts to enable compliant data sharing

Melbourne, Australia

Working for the Australian local government - The Victorian Building Authority (VBA) regulates building and plumbing practitioners to ensure the achievement of efficient and competitive building and plumbing industries in Victoria.My responsibilities included:• Logging building and plumbing compliance concerns and complaints for the investigations team• Creating case files for investigators with evidence and history records of non-compliance• Liaising with customers and practitioners and handling compliance queries• Supporting the freedom of information and Privacy Officer with FOI and Privacy requests• Supporting the compliance team with ad-hoc administrative requests• Supporting the investigations leadership team with meetings, minute-taking, and admin requests.

Kuala Lumpur, Malaysia

In 2016 I took an oppotunity to travel and volunteer in Southeast Asia. This lead me to assist the development of 2 hostels in Kuala Lumpur in exchange for food and accommodation.After improving the working practices at Dorms KL 1 I moved to open their new flagship hostel, Dorms KL 2, where I was responsible for launching the business.Responsibilities:• Hiring and training an effective workforce• Managing all cash revenue, including expenses and accounts procedures• Managing staff, undertaking performance reviews and setting and managing targets and deadlines• Resolving complaints and customer enquiries• Providing information on Kuala Lumpur and Malaysia and assisting guests to plan their travels around Malaysia and wider Southeast Asia• Backup receptionist - check-ins, check-outs, enquiries, and various ad-hoc duties.Additional Achievements:• Achieved highest rated hostel in Kuala Lumpur for Dorms KL 2• Created compliant CCTV procedures to comply with the Malaysian Data Protection Act (2010) • Re-wrote all daily working procedures to improve cash handling accountability for receptionists and provide a better customer experience at check-in/check-out• Recreated all expenses and accounts procedures for effective and transparent cash-management• Collected customer feedback and Implemented numerous improvements to the hostels• Created additional income streams via new product offerings and adjusted profit margins of current products to boost revenue• Networked with local businesses and tour operators to provide new services to guests and new comission opportunities and benefits to staff and volunteers• Rebranded all company communications for a consistent image and created and managed social media accounts, including Facebook and Instagram.

Newbury, Berkshire

Key Responsibilities• Logging and investigating all potential data breaches and reporting findings to executive board and audit and risk committee. • Driving business improvements from the outcomes of breach investigations• Logging and responding to all Subject Access Requests within statutory requirements• Logging and responding to all data protection queries and requests and creating business training and resource materials based on trends• Creating, updating and issuing policies and procedures to meet business requirements• Creating and managing the Data Protection roadmap, including preparations for the new EU General Data Protection Regulation (GDPR)• Conducting risk assessments (Privacy Impact Assessments) on new high-impact projects• Maintaining up-to-date registrations for all relevant Sovereign companies and entities with the Information Commissioner's Office (ICO)• Managing the relationship with the ICO and using own judgement to self-report breaches where necessaryAchievements:• Nominated for Team of the Year 2014 for work on the IT Asset Management project and project Rapide• Nominated as Employee of the Year 2014• Created a new Subject Access Request procedure alongside a customer application form and guidance document. These resulted in requests offering more clarity at the outset and improved response time• Created KPIs for more effective breach reporting and business analytics• Assisted in joining with the National Fraud Initiative which improved tenancy fraud investigations• Assisted with compliance requirements for the Right to Buy pilot to improve data capture using an online form - Sovereign is the only organisation taking this approach• Deputy Fire Marshall, overseeing the Strategy team, Company Secretariat, Procurement, Market rent and Development• Assisted in improving the Signing & Sealing process to deliver more Signed & Sealed contracts within a shorter time frame

Newbury, Berkshire

A multi-functional role which involves providing administrative and technical support at all levels, from team and department admin through to the IT Director and the Leadership team. By attending and having a key input to high-level management meetings the role has enabled me to develop a good understanding of strategy and operations which I have demonstrated on a day-to-day basis by going above and beyond my requirements.Key Responsibilities: • Support the leadership team by booking team meetings, creating agendas and taking minutes, logging and tracking actions via JIRA, maintaining the team SharePoint site and conducting various ad-hoc reports• Responsible for liaising with suppliers and managing relationships with key account managers and stakeholders of various contracts; including mobile phones, broadband and landline telephony• Responsible for purchase ordering licenses, support contracts and capital expenditures in AGRESSO.Achievements:• Supported Fraud and Whistle-blowing investigations lead by the internal risk department• Successfully and single-handedly ran a company-wide audit of mobile phone contracts, saving circa £72,000 (33% reduction) per annum in monthly recurring and usage fees• In collaboration with Procurement, negotiated a new mobile phone contract worth over £400k and further reduced annual spend • Created multiple training guides and documentation for mobile phones • Hand-picked by the Communications team to assist in visioning and deploying a Yammer network• First person in IT to be nominated as an Employee Engagement Forum (EEF) member. Within 1 month, made major contributions to how the forum operates and engages with the business• Created the first EEF PowerPoint presentation and regularly presented at the corporate induction event• Created the IT Ideas Management System which gave employees a voice during intense change• Deputy Fire Marshall overseeing HR and IT • Volunteer at 25th Anniversary Conference event

Reading, United Kingdom

hibu formerly went by the name of Yell, which was previously known as Yellow Pages.Acted as a single point of contact to provide 1st and 2nd line technical support for a global marketing company while adhering to ITIL V3 standards. Tickets were logged via BMC Remedy and SDE and prioritised based on volume and impact to maintain business continuity.Key Responsibilities:• Remote desktop assistance in Windows XP & Windows 7 machines via PCAnywhere, Logmein123 and RDP.• Basic SAP configuration, Lotus Notes 8, Microsoft Office (all applications), Active Directory, Lync, Livelook Co-browser, Altiris Deployment Solution and iTunes. Also handle various in-house applications and VMWare• iPhones/ iPads, Printers, Laptop and Desktop PCs and Apple Macs. Additional Achievements:• Consistently over-achieved on weekly KPIs – Achieved first time fix average of 85% with a target of 40% and was regularly in the top 3 for “calls closed within 10 minutes” per month.

Bath, Somerset

A target-driven role which involved proactively approaching customers on the shop floor and adopting a 'sales through service' strategy to promote the Credit Card and Premium Club services while achieving weekly KPIs.Additional Achievements:• Proactively coached Circa 200 employees resulting in a measurable increase of credit card and premium club sales for the store (average 50% increase per department) and improved staff performance• Took initiative to create sales tools for till points which significantly improved the quality of sales and figures• Scored highest in the region for 'Double-bubble' sales (selling both products in one transaction).

Banbury, Oxfordshire

Temporary position between College and University acting as the store’s only senior staff member.Key Responsibilities:• Day-to-day running of the store, managing and training staff, managing customer newspaper accounts, maintaining cash and safe procedures, banking large cash sums, completing store paperwork and reports.

Adderbury, Banbury

Key Responsibilities:• Providing discreet customer and technical service to SME customers including Celebrity accounts• Responsible for account management, upgrades, contract inquiries, ordering, selling, upselling, technical assistance and complaint handling.Additional Achievements:• Hand-picked by Fraud team to act as team escalation point to pre-screen possible fraud cases.

Banbury, Bicester, Birmingham

Key Responsibilities:• Supported the Manager by implementing vigilant anti-fraud practices, training and managing employees, conducting 1-to-1s and performance reviews, resolving customer complaints, and maintaining the safe and cash-handling procedures.

Banbury, Oxfordshire

Temporary role providing Christmas holiday cover.Key Responsibilities:• Customer service, complaint handling, till points, cash counting, banking store earnings, stock checking, delivery handling, cleaning and maintaining health & safety regulations, maintaining store displays.

Bachelor Of Science (Bsc), Psychology

Activities and Societies: - Took part in staff selection process as a student panel member and all 3 of my choice candidates were.

Education record