Connected Services Compliance Tech Lead

Toyota is a strong, global brand and one of the world’s leading automotive manufacturers. Teams at Toyota Motor Europe and Toyota Motor Manufacturing Poland in Lower Silesia are all working together to deliver the best mobility solutions for users around the world.

Our Digital Hub is Toyota Motor Europe’s IT research and development centre, established in 2026 in Wrocław. We are responsible for developing and maintaining software and connected digital services for the Toyota and Lexus brands in Europe.

• Degree in law, computer science, information systems, or a related field.
• 3-5 years of experience in privacy, data protection, or related fields, focused on the automotive or technology sector.
• In-depth knowledge of privacy laws and regulations such as GDPR.
• Strong technical background in software, cloud, connected services, data platforms, or vehicle systems engineering.
• Experience supporting incident response, root cause investigations, and risk mitigation.
• Relevant certifications (e.g., CISA, CRISC, ISO 27001, CIPP) are a plus.

• Act as the technical authority within the Privacy & Compliance Team, supporting team members with expert knowledge of system architectures, data flows, cloud services, connected vehicle technologies, and digital platforms.
• Develop and maintain an end-to-end understanding of data processing activities, system interactions, and information flows across the product and service ecosystem together with Data Governance team.
• Translate regulatory requirements (e.g., GDPR, Data Act, Cyber Resilience Act, AI-related requirements) into practical technical controls, design principles, and implementation guidance.
• Advise engineering and business teams on compliant system design, Privacy by Design, data minimization, access management, logging, retention, and other technical compliance measures.
• Support privacy, compliance, and cybersecurity assessments by performing technical reviews of systems, architectures, and data processing activities.
• Lead technical investigations and support incident management activities, including impact assessments, root cause analysis, remediation planning, and stakeholder coordination.
• Identify compliance risks arising from technical solutions and provide pragmatic recommendations.
• Mentor and guide team members on technical topics.

Please be informed that the data controller is TOYOTA MOTOR EUROPE NV/SA, ODDZIAŁ W POLSCE (hereinafter "controller"). You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.