Technical Privacy Consultant (Part-Time, 50%)

~280 - 320 PLN/ godz./ godz.B2BB2B (netto)

SeniorZdalnie·WarszawaPart-time·B2B

#474546·Dodano dziś·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

GDPRPrivacy By DesignDPIAAPI securityData Subject Rights (DSR)EncryptionConsent ManagementISO 27001CISSPGerman

Podsumowanie oferty

Support the Product Data Governance team by evaluating Privacy-by-Design and Privacy-by-Default across the product landscape. Review system architectures and data-processing workflows, and advise product teams on technical privacy controls and risk mitigation. The role involves consulting with Product Owners and architects, not hands-on software development.

Wymagania

Mindset & Autonomy:

Learn quickly, understand complex technical ecosystems, and take ownership of assessments with minimal supervision.
Deliver structured architectural feedback in evolving or loosely defined product environments.
Demonstrate strong communication and negotiation skills.
Explain complex technical privacy risks to non-technical stakeholders.
Challenge senior developers on architectural decisions when required.

Technical Knowledge:

5+ years of experience as a Privacy Architect, Privacy-by-Design Consultant, Technical Privacy Auditor, or in a similar role.
Strong knowledge of technical GDPR implementation, including data minimization, purpose limitation, and security of processing.
Deep understanding of architectures and tools supporting Data Subject Rights (DSR), consent management, and auditability.
Understanding of infrastructure segregation, API Gateway hardening, private network tunneling, and browser session hardening.
Practical knowledge of cryptographic segregation, Application-Level Encryption (ALE), secure tokenization, and data lake and analytics protection techniques such as PETs, k-anonymity, and Differential Privacy.
Familiarity with compliance standards such as ISO/IEC 27001 and SOC2 and their integration into technical risk assessments.

Certifications:

The following certifications are highly valued: CIPT, CDPSE, CISSP, CIPP/E, CIPM, CDPO, or equivalent technical privacy or security certifications.

Language Requirements:

Fluent English.

Nice to have:

German is considered a strong asset but is not required.

Obowiązki

Review and assess system architectures, digital products, and data-processing workflows throughout the product lifecycle for alignment with Privacy-by-Design and Privacy-by-Default.
Partner with Product Owners and Architects to translate regulatory requirements into technical design concepts, system requirements, and architectural acceptance criteria.
Execute or support technical Privacy-by-Design assessments and DPIAs.
Identify system-level privacy and security risks, evaluate architectural weaknesses, and recommend mitigating and compensating controls.
Advise engineering teams on technical privacy solutions, including encryption, pseudonymization, data minimization, access governance, and secure transfer protocol design.
Assess architectures for technical requirements related to GDPR, HIPAA, the EU Data Act, and the EU AI Act.
Act as a technical bridge between Engineering, Legal, Security, Quality, and business functions.
Communicate technical privacy risks and negotiate solutions with stakeholders.

Benefity

Multisport card.
Private healthcare.
Group life insurance.

Karta sportowa

Opieka zdrowotna

Ubezpieczenie

Inne informacje

100% remote work is available in Poland.
Working hours are within standard German business hours (09:00–18:00 CET), with a fixed daily schedule and occasional flexibility for ad-hoc project needs.
Availability is required ASAP or within 1 month.

Experis

342 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz