Job
- Level
- Senior
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Ort
- Bad Vilbel
- Arbeitsmodell
- Hybrid, Onsite
Job Zusammenfassung
In dieser Position entwickelst du eine globale Datenschutz- und Datenschutzstrategie, setzt rechtliche Vorgaben um, leitest Risikobewertungen und schaffst eine Datenschutzkultur im Unternehmen.
Deine Rolle im Team
- Develop, maintain, and continuously enhance the company's global data protection and privacy strategy.
- Establish global privacy governance structures, including policies, standards, and procedures.
- Function as the organization's primary subject matter expert for global privacy and data protection laws.
- Ensure compliance with major privacy regulations (GDPR, CCPA/CPRA, UK DPA, LGPD, PDPA, etc.).
- Oversee data mapping, Record of Processing Activities (RoPA), and Data Protection Impact Assessments (DPIA).
- Monitor global regulatory developments and assess implications for the organization.
- Serve as the appointed DPO under GDPR, including acting as point of contact for supervisory authorities.
- Advise on privacy obligations and monitor compliance with relevant data protection laws.
- Lead global privacy risk assessments and implement mitigation plans.
- Oversee third-party risk management for vendors and partners handling personal data.
- Ensure proper incident response processes for privacy-related breaches in coordination with IT Security.
- Develop and roll out global privacy training programs for employees and managers.
- Promote a data protection culture across the company.
- Advise the departments in the organization on privacy-by-design requirements.
- Review and negotiate data protection clauses and Data Processing Agreements with partners and vendors.
- Lead internal audits and coordinate external audits related to privacy and data protection.
- Provide regular reporting to the Executive Committee and Board-level audit or compliance committees.
Unsere Erwartungen an dich
Ausbildung
- Master's degree in Law, Compliance, Information Security, or related field preferred.
Qualifikationen
- Certifications such as CIPP/E, CIPM, CIPT, or ISO 27701 Lead Implementer are a strong asset.
- Deep understanding of global data protection laws (GDPR, CCPA/CPRA, LGPD, etc.).
- Strong technical and information security understanding.
- Strong stakeholder management skills.
- Excellent analytical and problem-solving capabilities.
- Ability to manage cross-functional projects and influence senior leaders.
- Strong communication skills; able to simplify complex privacy topics for non-experts.
- High ethical standards and resilience in navigating regulatory complexity.
Erfahrung
- 7-10 years of experience in data protection, privacy, compliance, or related fields.
- Proven experience in global or multi-regional privacy program management.
Unser Angebot
- 30 Tage Urlaub
- Flexible Arbeitszeiten
- Spannende Projekte
- Gute technische Ausstattung
- Hybrides Arbeiten: Büro & Remote
- Internationales Arbeitsumfeld
Benefits
Work-Life-Integration
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
DQS Holding GmbH
Die DQS Holding GmbH, ansässig in Frankfurt am Main, ist die Hauptgesellschaft der DQS Group. Diese international akkreditierte Gruppe bietet Audits, Zertifizierungen und Assessments für verschiedene Managementsysteme, Produkte und Prozesse an und übernimmt die organisatorische sowie strategische Steuerung des globalen Geschäfts.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Beratung