Senior Governance Risk and Compliance Expert

Brak informacji o wynagrodzeniu

SeniorHybryda·WarszawaFull-time

#473646·Dodano wczoraj·0

Źródło: Quality & Reliability S.A. (QnR)

Aplikuj teraz

Tech Stack / Keywords

DPIARoPASIEMCISACISMISO 27001ISO 27005CRISCCISSP-ISSMPGRC

Podsumowanie oferty

As a Senior Governance Risk and Compliance Expert, you will support a public-sector client by ensuring IT operations align with EU data protection legislation. The role includes conducting privacy impact assessments, maintaining records of processing activities, and advising stakeholders on data protection obligations.

Wymagania

At least 5 years of IT experience and 4 years in a GRC role.
Master’s degree in Computer Science, Engineering or a related technical field.
Hands-on data protection compliance experience in an ICT, EU institutional, or public-sector environment.
Experience preparing or reviewing RoPAs, DPIAs, Data Processing Agreements, and Transfer Impact Assessments, including data mapping and input validation from technical owners.
Experience documenting technical arrangements relevant to data protection: access rights, privileged access, logs/SIEM exports, retention, data flows, processors and subprocessors.
Deep knowledge of EU data protection legislation, regulatory frameworks, and privacy standards.
Ability to work with incomplete or inconsistent ICT information, distinguishing facts from assumptions, identifying gaps and structuring clear follow-up.
Strong communication skills and ability to explain data protection topics to technical and non-technical audiences.
English C1 level certification.
At least 3 certifications from the following: CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), GSNA (GIAC Systems and Network Auditor), GCCC (GIAC Critical Controls), ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager, CAP (Certified Authorization Professional), CRISC (Certified in Risk and Information Systems Control), CISSP-ISSMP (Information Systems Security Management Professional), GIAC Certified ISO-27000 Specialist, or an internationally recognised equivalent subject to EU-I acceptance.

Nice to have:

Prior experience in an EU institutional environment.
Familiarity with the practical implications of evolving EU legal frameworks on organisational data protection strategy.
Experience collaborating across multidisciplinary teams including cybersecurity, SOC, and architecture functions.

Obowiązki

Ensure IT operations comply with data privacy laws, regulations and standards.
Conduct privacy impact assessments (DPIAs) and maintain records of processing activities (RoPAs).
Identify compliance gaps and propose practical countermeasures.
Advise on data protection matters, particularly around personal data processing.
Develop, maintain and communicate data privacy policies and procedures.
Deliver staff awareness training to foster a culture of data protection.
Act as the contact point for queries and complaints related to data processing.
Cooperate with authorities and professional groups on data protection matters.
Manage legal aspects of information security and third-party relations.

Quality & Reliability (QnR)

2 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz