Bachelor’s degree in Law, Economics, Information Security, Business Administration, or another relevant field;
Minimum of 3–5 years of experience in data protection, compliance, audit, risk management, legal, or related fields;
Professional certifications such as CIPP/E, CIPM, Certified Data Protection Officer (DPO), CCEP, or equivalent are considered an advantage;
Strong knowledge of personal data protection legislation, including the General Data Protection Regulation (GDPR), applicable national legislation, and privacy and information security best practices;
Good understanding of compliance requirements, ethics, anti-corruption, conflicts of interest, internal investigations, reporting obligations, and internal policies;
Proven ability to conduct compliance risk assessments, Data Protection Impact Assessments (DPIAs), audits, controls, and remediation plans;
Experience in investigating and managing compliance incidents, information security incidents, and personal data breaches;
Ability to develop, update, and implement policies, procedures, registers, reports, and training materials;
Excellent communication, stakeholder management, and training skills, with the ability to work effectively with internal departments, regulatory authorities, customers, suppliers, and other stakeholders;
Excellent written and spoken English;
High level of integrity, professional ethics, attention to detail, analytical thinking, confidentiality, professional independence, and a solution-oriented mindset.

Data Protection & Compliance Officer Fixed term contract: 2 years

One of the market leaders in Employee Rewards and Benefits is hiring! Join the great team of this competitive employer (Bucharest offices) and take the opportunity to work in a fulfilling and stable environment.

Responsibilities:

Data Protection Responsibilities:

Monitors and evaluates compliance with personal data protection legislation and the internal policies applicable across the company and its affiliates;
Advise the company, its affiliates, and internal departments on data protection obligations, including within new projects, processes, products, and services;
Coordinate and/or participate in Data Protection Impact Assessments (DPIAs), internal audits, and relevant compliance reviews;
Manage, investigate, and document information security incidents and personal data breaches, proposing corrective and preventive measures;
Prepare and maintain records of processing activities, registers, privacy notices, procedures, policies, and reports related to data protection;
Draft and review contractual documentation related to personal data protection, including but not limited to Data Processing Agreements (DPAs);
Act as a point of contact with the Supervisory Authority and support responses to data subject requests;
Organize and deliver data protection and privacy awareness training sessions and communication campaigns.

Compliance Responsibilities:

Monitor and assess compliance with applicable regulatory requirements, internal policies, and Group standards;
Conduct compliance risk assessments and recommend preventive, mitigating, and corrective actions;
Support the implementation and regular update of compliance policies and procedures, including those related to ethics, anti-corruption, conflicts of interest, and whistleblowing/reporting;
Investigate, document, and monitor the remediation of compliance incidents and reports within the scope of the role;
Prepare compliance reports for management, the Group, and, where applicable, competent authorities;
Deliver compliance, ethics, and integrity training and provide guidance to employees;
Collaborate with internal departments to integrate compliance and data protection requirements into operational processes.

Administrative Responsibilities:

Prepare reports, statistics, documentation, and action plans related to assigned activities, ensuring accuracy and timely delivery;
Perform any other duties related to the role as assigned by the direct manager, in accordance with professional experience, competencies, and the applicable legal framework.

Benefits:

Flexible hybrid working environment
The 13th salary
Meal, Gift & Holiday vouchers
Medical subscription & medical insurance
Life insurance
And many more