Data Protection Officer

What you bring

• Experience working in data protection compliance or a related field
• Experience with second line of defence functions, such as legal, compliance, risk or audit
• Excellent organisational, communication, and management skills
• Expertise in European data protection laws and practices including an in-depth understanding of GDPR and the management of personal, sensitive and confidential information
• Deep understanding of computer security systems and data security
• Independent thinker with a compliance mindset
• Writes and speaks fluent English
• It's not required to have experience working remotely, but considered a plus

Job Responsibilities

• Implementing measures and a privacy governance framework to manage data use in compliance with the law, including developing templates for data collection, assisting with data mapping, and vendor management reviews
• Working with key internal stakeholders in the review of projects and related data to ensure compliance with local data privacy laws, and where necessary, complete and advise on privacy impact assessments
• Serving as the primary point of contact and liaison for the Lead Supervisory Authority and other EEA Data Protection Authorities on all data protection related matters under data protection laws
• Serving as the primary point of contact for queries in the business
• Overseeing vendor contracts and consents needed to implement projects in partnership with the firm’s Procurement and Information Security functions, and ensuring filing requirements with local regulators are achieved
• Managing and conducting ongoing reviews of the Company’s privacy governance framework
• Maintaining records of processing and documenting activities carried out by the Company
• Monitoring changes to local and international privacy laws and making recommendations to the business when appropriate
• Setting standards and reviewing policies and procedures globally that meet the requirements under data protection laws and any localisation requirements in countries of operation
• Developing and delivering privacy training to various business functions
• Developing strategies and initiatives to ensure engagement with key internal and external stakeholders
• Coordinating and conducting data privacy audits
• Collaborating with the Information Security function to raise employee awareness of data privacy and security issues, and providing training on the subject matter
• Collaborating with the Information Security function to maintain records of all data assets and exports, and maintaining a data security incident management plan to ensure timely remediation of incidents including impact assessments, security breach response, complaints, claims or notifications, and responding to subject access requests (SARs)
• Ensuring that the Company’s IT systems and procedures comply with all relevant data privacy and protection law, regulation and policy (including in relation to the retention and destruction of data)
• Working with in-house lawyers, where necessary, outside counsel to help advise on local data privacy law issues
• Promoting effective work practices and promoting a culture of privacy
• Being impartial and ethical, and reporting any failure to comply with GDPR or applicable data protection rules