Business Security & Data Privacy Officer
Core
Define and maintain internal Security and Privacy frameworks, ensure compliance with regulations (GDPR, DORA, NIS2, ISO, SOC2), and support business units on data privacy and security topics.
Role type
Senior IC Business Security & Data Privacy Officer
Builds
Internal Security and Privacy framework, compliance reporting, security assurance plans
Domain
Cybersecurity, Data Privacy, Regulatory Compliance (GDPR, DORA, NIS2)
Deliverable
dashboards & analysis
Required skills
Data privacy and security knowledge, regulatory compliance (GDPR, DORA, NIS2), ISO certifications (27001, 27701), SOC2 assurance, GRC tools, audit management, stakeholder communication, process implementation
Preferred skills
ISO 27035 Risk Manager, CISSP, CISM, CISA, CRISC, client-facing privacy application
Technologies
GRC tools, dashboards, compliance reporting platforms
Responsibilities
Define and maintain internal Security and Privacy framework, act as point of contact for data subject requests, analyze and audit processing activities for compliance, provide advice on DPIAs/PIAs, promote data protection culture, maintain security assurance plans for products, support internal and external audits, assist legal/sales teams with contractual security requirements
Seniority
Senior, hands-on IC