We are looking for several forward-thinking and hands-on freelance Data Protection Officers to take over the role of DPO for our customers in line with GDPR requirements
What you will do for your customers:
- Implementing compliance with principles relating to processing, such as purpose limitation, data minimization or accuracy
- Identifying the legal basis for data processing
- Assessment of the compatibility of purposes other than those which gave rise to initial data collection
- Determining whether any sectoral regulation may determine specific data processing conditions that are different from those established by general data protection regulations
- Designing and implementing measures to provide information to data subjects
- Establishing mechanisms to receive and manage requests to exercise rights of the data subjects
- Assessing requests to exercise rights of the data subjects
- Hiring data processors, including the content of the contracts or legal documents that regulate the controller – processor relationship
- Identifying international data transfer instruments that are suited to the needs and characteristics of the organisation and the reasons that justify the transfer
- Design and implementation of data protection policies
- Data protection audits
- Establishing and managing a register of processing activities
- Risk analysis of the processing operations carried out
- Implementing data protection measures by design and by default that are suited to the risks and nature of the processing operations
- Implementing security measures that are suited to the risks and nature of the processing operations
- Establishing procedures to manage violations of data security, including assessing the risk to the rights and freedoms of the data subjects and procedures to notify supervisory authorities and the data subjects
- Determining the need to carry out data protection impact assessments
- Carrying out data protection impact assessments
- Relations with supervisory authorities
- Implementing training and awareness programs for personnel on data protection.
What you will bring to the table:
- A compliance, IT security, legal or audit background
- Knowledge of data privacy legislation including GDPR
- Experience in managing data incidents and breaches
- Knowledge of cybersecurity risks and other information security standards
- Ability to make good judgements regarding data privacy risks and to prioritise resources and activity around managing those risks
- Able to conduct the role independently and with integrity
- Ability to plan, organise and prioritise tasks and projects
- Strong personal communication skills capable of dealing with wide range of stakeholders, including senior management
- Proven ability to establish and maintain a high degree of confidentiality, respect, trust and credibility at all levels
- Strong team player
- Enthusiastic and positive
- The ability to remain calm, controlled and resilient
- Fluent in English (mandatory), French & Dutch are an asset
Send your CV at: dpo@itaasc.com