Stellenbeschreibung
1. Informs and advises the organization`s management and the employees who carry out processing of personal data of their obligations under the EU Regulation no. 679/2016 and other provision of European Union or national law relating to data protection;
2. Monitors compliance with EU Regulation no. 679/2016, with other European Union or national law related to data protection and with the company`s policies and procedures related with data protection, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits;
As part of its compliance monitoring tasks, it undertakes the following:
3. collects information to identify processing operations;
4. Analyses and verifies the compliance of processing operations;
5. informs, advises and issues recommendations to the company's management;
6. actively participate in conducting Data Protection Impact Assessment (DPIA) and monitor its performance pursuant to Article 35 of EU Regulation no. 679/2016.
7. Advising staff and management team in managing personal data security incidents;
8. Permanent monitoring of the data processing processes carried out by the organization as controller or processor, identifying areas for improvement and providing support in implementing the necessary changes to ensure compliance with the highest standards of good practices in the field of data protection;
9. Performs constant adaptation of internal procedures to the organization's business processes so as to maintain compliance with EU Regulation no. 679/2016;
10. Facilitates the implementation of internal policies and procedures related to data protection;
11. Issuing recommendations and providing expert assistance to the organization regarding the interpretation and application of the provisions of the legislation on personal data protection;
12. Performs analysis and assessment of the risks of processing personal data and the conformity of personal data processing operations;
13. Conducting risk assessment for high-risk processing in connection with data protection requirements, including data security, security breach notification, privacy by design, legitimate interest, purpose limitation and fair processing;
14. Perform identification of business processes and systems that relate to personal data and are deemed in-scope for data protection;
15. Drafting of points of view on specific issues of personal data protection;
16. Promote the data protection principals within the organization;
17. Continuously monitor and inform the organization in relation with the changes in the legislation, in particular in the area of personal data protection;
18. Performs analysis and responds of requests from data subjects under the GDPR (right of access, right to be forgotten, right to rectification of data, etc.);
19. Prepares inventories and maintains a register of processing operations (ROPA);
20. Maintain a registry of all incidents, complaints, data breaches and notifications;
21. Cooperation with the supervisory authority and assuming the role of contact point for the supervisory authority on processing matters, including the prior consultation referred to in Article 36 of EU Regulation no. 679/2016, as well as, if applicable, consultation on any other matter;
22. Represent the organization in dealing with data protection matters including complaints, data breaches and notifications;
23. Manages the relationship with the supervisory authority in the field of personal data protection;
24. Conducts audits on data protection compliance;
25. Prepares an annual report of the DPO's activities;
26. Elaborates and organizes training for employees and management on their responsibilities under data processing activities;
Qualifikationen
27. Bachelor`s degree in law
28. Several years of professional experience in a similar position [data protection laws]
29. Data Privacy Certifications would be a plus
30. Advanced knowledge of European data protection laws and AI Act
31. Excellent understanding and experience with international privacy laws
32. Solid understanding of IT and AI technologies and their implications for data protection
33. Ability to assess risks and implement mitigation measures.
34. Experience working with cross-functional teams
Applications from severely handicapped people are welcome.
Zusätzliche Informationen
The well-being of our employees is important to us. That's why we offer exciting career prospects and support you in achieving a good work-life balance with additional benefits such as:
35. Training opportunities
36. Mobile and flexible working models
37. Sabbaticals
38. and much more...
Sounds interesting for you?
#Jobdrehscheibe
Sie wollen mit uns Gas geben? Starten Sie durch und bewerben Sie sich jetzt!