Senior Data Protection Specialist

About the role

Join the Data Protection team as a Senior Data Protection Specialist and help shape the company’s privacy strategy. You will act as the primary legal advisor on GDPR and data protection matters, supporting business units to make risk‑based decisions while ensuring compliance with evolving regulations.

Key responsibilities

• Serve as the senior subject‑matter expert on GDPR, data protection law, and privacy governance.
• Independently manage complex legal projects, drafting and negotiating data protection agreements, joint controller agreements, SCCs, TIAs, DPIAs, and related governance documents.
• Prepare detailed legal analyses and risk‑based recommendations on data protection risks and regulatory exposure.
• Provide tailored guidance to IT, security, HR, product, and legal teams on privacy‑by‑design, data minimisation, retention, breach handling and notification obligations.
• Support interactions with supervisory authorities, including audits, inspections and investigations.
• Monitor EU and international data protection developments, translating guidance and enforcement trends into actionable changes.
• Identify and implement improvements to data protection governance, templates, policies and internal procedures.
• Represent the company in negotiations with customers, vendors and partners on data protection matters.

Required profile

• University degree in Law (LL.M., Mgr. or equivalent).
• At least 5 years of post‑graduate legal experience, with a minimum of 3 years focused on data protection, privacy law and GDPR compliance.
• Proven track record of managing international data transfers, privacy governance frameworks and supervisory authority interactions.
• Strong analytical skills and ability to translate legal requirements into practical business solutions.

Required skills

• In‑depth knowledge of GDPR, EU data protection directives and international data‑transfer mechanisms.
• Experience drafting and negotiating data processing agreements, joint controller agreements, SCCs and TIAs.
• Hands‑on experience conducting DPIAs, maintaining ROPA and managing data breach processes.
• Familiarity with privacy‑by‑design principles, data minimisation and retention policies.