Compliance/data Protection Officer and Senior Legal Counsel

Allianz Digital Health GmbH (ADH) is a Munich, Germany based subsidiary of Allianz SE.
What does it take to support Health insurance executives globally to achieve lasting success in their business?
It takes a lot. We look for people with dedication, knowledge, and curiosity. For people who want to learn and work in a truly exceptional team.
If you feel inspired by the idea to see your advice having tangible impact at Allianz units worldwide, ADH is the right place for you.
As a Compliance/Data Protection Officer and Senior Legal Counsel you will provide the ADH management and ADH team members with advice on all legal, privacy and compliance related matters. But that is not all: You will also act as the link of ADH to the Allianz Group functions for legal, privacy and compliance. Thus, you will not only be translating the Allianz Group requirements to ADH as a non-insurance non-regulated entity, but you will also be building a trusted network with your peers in the Group. Your responsibility will cover a wide range of exciting topics with a primary focus on:

- Legal advice, including contract development, negotiation and management (notably of IT-related contracts with ADH customers and suppliers); third-party risk management, legal change management, corporate housekeeping.
- Maintenance of a sound data protection and compliance organization, including staff trainings, risk assessments (e.g., privacy impact assessments, non-financial risk management)

Tasks
The following list of areas to add value is certainly not exhaustive, but gives you a good first overview of the various activities you will take responsibility for:
**Data Privacy**:

- Maintenance of the ADH data privacy organization by ensuring compliance with the GDPR and related Allianz corporate rules
- Maintenance of ADH’s records of processing activities, including the support of impact assessments (privacy / data protection / transfer / ethical), depending on the use case
- Provide privacy advice regarding ADH's software products to the extent personal data is processed (e.g., for any new features or changes to the current solutions), including close collaboration with the relevant product owners and the information security function
- Foster a data privacy culture, e.g., through the preparation and presentation of ADH-tailored privacy trainings.

**Compliance**:

- Maintenance of ADH's compliance management system
- Assessment of applicability and implementation of relevant Allianz compliance programs
- Manage non-financial risks, including oversight on relevant ADH functions, documentation and testing of controls
- Manage regulatory/legal change, e.g., by assessing the applicability and impact of new regulations to ADH and support their implementation
- Raise awareness on applicable compliance programs via ADH-tailored trainings

**Legal**:

- Manage contracts, including maintenance of ADH standard contracts template, negotiation of IT and non-IT contracts, such as software-as-a-service agreement, service agreements and consulting agreements
- Provide legal advice to ADH management and other functions and support cross-functional topics (such as the assessment of new suppliers or tools)
- Maintain applicable Allianz corporate rules, including proportionate adjustments for ADH where necessary and oversight on implementation
- Support corporate legal housekeeping

**Requirements**:

- You have successfully completed degree in law: 2nd German state exams, LL.M., Doctor of Laws or European equivalent; privacy certificate (e.g. CIPP/E) is a plus
- You bring at least three years of work experience: You are experienced in contract and IT law and worked in a law firm or as in-house legal counsel on privacy, IT law and regulatory matters
- You are fluent in English. including legal terminology
- You can draft, review and negotiate (IT) contracts, including software-as-a-service data processing, joint controller and controller-to-controller agreements, to draft data privacy and compliance related policies and standards and to design respective harmonized privacy and compliance related processes
- You are inspired by the opportunity to work autonomously on a broad array of legal, regulatory and privacy topics
- You have experienced as a data protection
- and/or compliance officer. Some knowledge in the following fields would be a plus: legal aspects of information security (e.g., EU DORA, NIS-2) and digitalization regulation (including artificial intelligence), (non-financial) risk management
- You are target oriented and diligent by nature and you appreciate working in a broader team, yet with a high level of personal accountabilty

**Benefits**:

- You will have business impact and see the results of your work live in markets across the world.
- You enjoy Allianz Group benefits while at the same time working in a start-up culture - with great flexibility in working style, freedom to shape your working environment, a super-flat hierarchy and fast deci