About this role
Ihre Rolle 1. Global Strategy & Governance
• Develop, maintain, and continuously enhance the company’s global data protection and privacy strategy. • Establish global privacy governance structures, including policies, standards, and procedures. • Function as the organization’s primary subject matter expert for global privacy and data protection laws. 2. Regulatory Compliance
• Ensure compliance with major privacy regulations (GDPR, CCPA/CPRA, UK DPA, LGPD, PDPA, etc.). • Oversee data mapping, Record of Processing Activities (RoPA), and Data Protection Impact Assessments (DPIA). • Monitor global regulatory developments and assess implications for the organization. 3. Data Protection Officer (DPO) Responsibilities
• Serve as the appointed DPO under GDPR, including acting as point of contact for supervisory authorities. • Advise on privacy obligations and monitor compliance with relevant data protection laws. 4. Privacy Operations & Risk Management
• Lead global privacy risk assessments and implement mitigation plans. • Oversee third‑party risk management for vendors and partners handling personal data. • Ensure proper incident response processes for privacy-related breaches in coordination with IT Security. 5. Training & Awareness
• Develop and roll out global privacy training programs for employees and managers. • Promote a data protection culture across the company. 6. Business Partnering
• Advise the departments in the organization on privacy-by-design requirements. • Review and negotiate data protection clauses and Data Processing Agreements with partners and vendors. 7. Audits & Reporting
• Lead internal audits and coordinate external audits related to privacy and data protection. • Provide regular reporting to the Executive Committee and Board-level audit or compliance committees.
Ihr Profil Education
• Master’s degree in Law, Compliance, Information Security, or related field preferred. • Certifications such as CIPP/E, CIPM, CIPT, or ISO 27701 Lead Implementer are a strong asset. Professional Experience
• 7–10 years of experience in data protection, privacy, compliance, or related fields. • Proven experience in global or multi‑regional privacy program management. Skills & Competencies
• Deep understanding of global data protection laws (GDPR, CCPA/CPRA, LGPD, etc.). • Strong technical and information security understanding • Strong stakeholder management skills. • Excellent analytical and problem-solving capabilities. • Ability to manage cross-functional projects and influence senior leaders. • Strong communication skills; able to simplify complex privacy topics for non-experts. • High ethical standards and resilience in navigating regulatory complexity.
Success Factors
• Ability to build and maintain a robust global privacy governance framework. • Proactive partnership with business functions to enable innovation while ensuring compliance. • Strong risk management mindset with business-enabling orientation. • Trusted advisor to senior leadership and confident regulator interface.