Data Sovereignty & Transfers Specialist

In4ge is a recruitment company focused on connecting talented professionals with suitable companies. The client is a global technology and strategy consulting firm serving leading organizations in pharmaceuticals, energy, and the public sector.

• Minimum 5 years of experience in privacy, data protection, or data governance in consulting, law firms, or internal privacy structures.
• Advanced practical knowledge of GDPR, especially Chapter V and transfer mechanisms (SCC, adequacy decisions, EU-US Data Privacy Framework) and experience in conducting TIAs.
• Ability to analytically read legal and contractual texts and synthesize conclusions for executives in accessible language.
• Certified Information Privacy Professional/Europe (CIPP/E) or equivalent successful experience in data transfer assessments.
• Fluent written and spoken English.

Nice to have:

• Certifications CIPM or CIPT.
• Knowledge of privacy-tech solutions (data classification and discovery tools).
• Project experience in financial or public sectors.
• Knowledge of French or German.
• Legal education.

• Analyze jurisdictional exposure of environments including scope of US CLOUD Act, FISA 702, Chapter V GDPR, and third-country access paths.
• Conduct Transfer Impact Assessments (TIA) using repeatable methodologies based on EDPB guidelines and case law.
• Analyze cloud contracts, data processing agreements (DPA), and subcontractor chains for clauses transferring data or control outside the EU.
• Work with discovery tools such as Microsoft Purview, BigID, Collibra, and augment client data maps with jurisdictional attributes.
• Recommend remediation actions, including choosing European providers, key control measures, and appropriate organizational and legal actions.
• Co-create the legal-regulatory pillar of the Digital Sovereignty Assessment service and provide substantive support in bids and proposals.
• Create reusable analytical materials including TIA templates, risk checklists, and clause libraries.