GRC Expert (Data Protection & Privacy)

Cyclad is an international consulting company specializing deeply in the IT/ICT sectors, delivering outsourcing services across HR and IT domains. They serve diverse industries including Banking, Aviation, Travel, Cybersecurity, and BPO, tailoring solutions to each sector's challenges.

• Minimum 5 years of experience in personal data protection, privacy, or compliance in ICT or similarly complex organizations.
• At least 3 years of experience preparing or reviewing documentation (RoPA, DPIA, DPA, TIA) for real systems, services, or processes.
• Minimum 2 years analyzing technical data protection aspects: access management, privileged access, log management, SIEM, data retention, hosting, data transfers, vendors, and subprocessors.
• Strong knowledge of European data protection regulations, privacy and compliance frameworks, legal and regulatory requirements, IT Operations, and IT Service Delivery.
• At least 3 certifications among CISA, CISM, CRISC, CISSP ISSMP, GSNA, GCCC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager, CAP ISC2, GIAC Certified ISO 27000 Specialist or equivalents.

Nice to have:

• Privacy governance
• Compliance
• RoPA
• DPIA
• DPA

• Ensure ICT environment compliance with data privacy and data protection requirements.
• Design, implement, and audit data protection; identify risks and compliance gaps; recommend corrective actions.
• Provide consultancy on data processing and privacy governance.
• Prepare and review documentation such as RoPA, DPIA, DPA, TIA, privacy notices, and privacy statements.
• Analyze data flows, access management, privileged access, logs, SIEM, data retention, hosting, transfers, vendors, and subprocessors.
• Collaborate with system owners, architects, cybersecurity teams, SOC, infrastructure, IT Operations, and suppliers.
• Develop policies, standards, and procedures; build compliance awareness; support audits, regulatory activities, and governance initiatives.