Connected Services Compliance Tech Lead

Toyota Digital HUB is Toyota Motor Europe’s IT research and development centre, established in 2026 in Wrocław. It develops and maintains software and connected digital services for Toyota and Lexus brands in Europe. The R&D4 Privacy & Compliance Team enables secure, compliant, and trusted connected and software-defined vehicle solutions by partnering closely with engineering, IT, legal, compliance, cybersecurity, and business teams to embed privacy, data governance, and regulatory compliance requirements from concept through deployment.

• Fluent English (business language).
• Degree in law, computer science, information systems, or a related field.
• 3-5 years of experience in privacy, data protection, or related fields, focused on automotive or technology sectors.
• In-depth knowledge of privacy laws and regulations such as GDPR, CCPA, and relevant standards like ISO 27001.
• Strong technical background in software, cloud, connected services, data platforms, or vehicle systems engineering.
• Approximately 5 years or equivalent experience in IT / software compliance and risk management.
• Ability to understand complex system architectures and map end-to-end data flows across domains and stakeholders.
• Basic project management skills; Agile experience is a plus.
• Experience supporting incident response, root cause investigations, and risk mitigation.
• Strong analytical and problem-solving skills with a collaborative and solution-oriented mindset.
• Proactive willingness to learn.
• Ability to communicate complex concepts clearly to both technical and non-technical stakeholders.

Additional requirements:

• Relevant certifications such as CISA, CRISC, CGRC, ISO 27001, CIPP/CIPM, CISSP.
• Experience with ISO standards (27001, 27701, 27005).
• Background in privacy or cybersecurity.

Technical authority and expertise:

• Act as the technical authority within the Privacy & Compliance Team, supporting team members with expert knowledge of system architectures, data flows, cloud services, connected vehicle technologies, and digital platforms.
• Develop and maintain an end-to-end understanding of data processing activities, system interactions, and information flows across the product and service ecosystem together with the Data governance team.
• Translate regulatory requirements (e.g., GDPR, Data Act, Cyber Resilience Act, AI-related requirements, cybersecurity and data governance obligations) into practical technical controls, design principles, and implementation guidance with IT&D data protection team.
• Advise engineering and business teams on compliant system design, Privacy by Design, data minimization, access management, logging, retention, and other technical compliance measures.
• Support privacy, compliance, and cybersecurity assessments by performing technical reviews of systems, architectures, and data processing activities.
• Lead technical investigations and support incident management activities, including impact assessments, root cause analysis, remediation planning, and stakeholder coordination.
• Identify compliance risks arising from technical solutions and provide pragmatic recommendations to achieve regulatory and business objectives.
• Collaborate with system owners, architects, developers, cybersecurity experts, and compliance professionals to define compliant and scalable solutions.
• Mentor and guide team members on technical topics, helping build organizational capability in privacy, compliance, data governance, and system architecture understanding.