
Data Protection Compliance Specialist (DPO) @ING Hubs Romania
- București
- Permanent
- Full-time
- Provide expert advice and consultancy to ING Hubs Romania’s management team and employees on the applicable obligations related to processing of personal data, as per the applicable laws and GPDP requirements;
- Provide support, review and challenge in developing and maintaining local set of personal data related procedures and review of other procedures which contain personal data protection topic, to ensure implementation of the applicable requirements at the level of ING Hubs Romania;
- Provide juridical/ legal support, review and challenge for assessing risks and incidents (such as data breaches);
- Ensure support when access rights are exercised by various individuals in relation to ING Hubs Romania;
- Ensure support and input to 1st line of defence representatives when performing data protection impact analysis and balancing tests and monitors the implementation of the agreed actions;
- Provide support and input for the local/ internal training and awareness initiatives;
- Participate in the periodical testing activities of key controls and prepare the appropriate documentation, when and if applicable;
- Cooperate with the Data Protection Authority, when applicable, being the dedicated point of contact;
- Support the identification of the impact of and the coordination of responses to law and regulatory changes, internal & external audit reports, etc. and monitoring the follow-up on the regulatory issue solving;
- Perform and assist in other information risk activities where the requirements arise;
- Steer on consistency in approach of interpretation of GDPR and ING internal Data Protection Policies as well as specific local regulation and provide risk management direction for the organization to transition within risk appetite where relevant and/or applicable;
- Contribute to the Data Protection Compliance Community. Maintain insight on Data Protection issues and developments in the Data Protection Compliance community via periodic calls and reports.
- Bachelor’s degree, preferably in Legal field;
- 3-5 years’ experience in Personal Data Protection area;
- Exposure to & understanding technical & business-related threats facing banking industry;
- Fluent in English (written and spoken).
- Having professional education and training in Data Privacy, such as CIPP, CIPM.