Governance Risk and Compliance Expert | Branża technologiczna

Edge One Solutions is a community of over 350 experts and part of the Euvic Group with 5500 employees. The client is an international consulting and technology company with over 35 years of experience, headquartered in Milan and Bern, with offices across Europe and the USA. The client provides IT services and business consulting to media, financial, energy, transport sectors, and the public sector.

• Minimum 5 years of experience in data protection and compliance in ICT, public sector, EU institutions, or technology organizations
• Experience preparing and reviewing data protection documentation (RoPA, DPIA, DPA, TIA)
• Knowledge of technical data protection aspects including data flows, access management, system logging and monitoring, retention, and data transfers
• Practical experience collaborating with IT, security teams, system architects, and service providers
• Strong knowledge of Regulation (EU) 2018/1725 and data protection principles
• Ability to analyze technical documentation and data processing workflows
• Independence, accuracy, and ability to work in an international environment
• English language proficiency at minimum C1 level

Nice to have:

• Experience in EU institutions or international organizations
• Knowledge of European Data Protection Supervisor (EDPS) guidelines
• Experience in cybersecurity, risk management, or IT audit
• Certifications related to data protection, information security, or governance (CIPP/E, CIPM, ISO 27001, CRISC)

• Preparing and maintaining data protection documentation (e.g., RoPA, DPIA, DPA, TIA, Privacy Notices)
• Mapping data processing workflows and analyzing data flows in ICT environments
• Verifying IT processes and systems compliance with data protection requirements and assessing technical and organizational safeguards
• Collaborating with system owners, architects, security teams, and vendors to gather and validate technical information
• Monitoring risks, corrective actions, and compliance initiatives related to data protection
• Preparing reports, procedures, standards, and materials supporting Governance, Risk & Compliance processes
• Supporting implementation of Regulation (EU) 2018/1725 requirements and Privacy by Design and Privacy by Default principles
• Participating in ICT projects, system changes, and procurement processes from a data protection perspective