Senior Specialist, Data Privacy and Protection

Role mission
The Data Risk and Privacy Lead is responsible for implementing data privacy compliance across their assigned scope and ensuring data security and regulatory compliance by leading risk mitigation strategies, managing incidents, and implementing data risk frameworks across the data lifecycle.
Main responsibilities
Compliance & Regulatory Oversight
•
Guide and monitor operational compliance with data protection laws and internal privacy policies.
•
Support execution of the Data Risk Assurance Framework using approved tools and templates.
•
Conduct periodic compliance reviews.
•
Maintain an up-to-date processing register using central tools and processes.
Strategy, Governance & Reporting
•
Contextualize and operationalize the SE Data Risk strategy.
•
Govern the Data Risk framework across the data lifecycle.
•
Design and implement data risk policies and mitigation frameworks.
•
Establish and maintain local privacy governance (steerco, action plans, risk reporting).
•
Align with the Group Data Protection Office and local and regional regulatory requirements.
•
Track and report privacy performance using KPIs and maturity assessments.
Risk Management & Compliance
•
Anticipate, identify, prioritize, and mitigate data risks.
•
Ensure compliance with data controls and regulatory requirements.
•
Liaise with the Data Risk & Security team on assurance and risk management.
Data Risk and Privacy Lead
Job description
Internal
Support & Incident Management
•
Report and document privacy incidents, lead privacy-related aspects of investigations, and lead data incident analysis and mitigation.
•
Ensure all incidents follow the Cyber Incident process.
•
Promote awareness of breach-handling requirements.
•
Maintain a local register of data breaches.
Program & Process Oversight
•
Develop and deliver a local data risk assurance plan.
•
Maintain the processing register using centrally provided tools.
•
Support digital asset certification.
•
Ensure DPIAs are initiated and reviewed where necessary.
•
Ensure vendors complete privacy due diligence and have a signed Data Protection Addendum.
•
Monitor overall progress of data risk initiatives.
•
Execute manage risk mitigation and control implementation within the Data Office.
Queries & Claims
•
Act as the contact point for data subjects and manage queries and claims in line with company policy.
Training & Awareness
•
Promote a strong privacy culture through training and awareness activities.
•
Provide guidance to employees on privacy responsibilities and best practices.

Skills and experience
Education and experience
•
Bachelor's degree in information systems, business, data management, cybersecurity, law, compliance, or a related discipline-or equivalent practical experience.
•
9-14 years of relevant experience in data governance, privacy, risk management, compliance, audit, or information security.

Internships, academic projects, and rotational assignm...