Data Protection Senior Expert

Administration
EMBL Heidelberg

This position is located and carried out in the Data Protection Office (DPO) of the European Molecular Biology Laboratory in Heidelberg, Germany.

Under the supervision of EMBL’s DPO, the Data Protection Senior Expert will provide strategic, technical, and operational support as part of the DP Office and will play a central role in the successful shaping and implementation of a comprehensive DP Strategy throughout the organisation. As Data Protection Senior Expert, you will either support or lead multiple projects, or; you will be expected to continue transforming already existing framework into action, managing the day-to-day operations by supporting staff, internal stakeholders and external partners on all six sites of EMBL.

Your role

**MAIN RESPONSIBILITIES**:

- Providing support in developing, implementing and operationalizing data protection policies, procedures and tools to maximize efficiency and comprehensive roll out of the data protection strategy across EMBL’s departments and units.
- Review existing policies, guidelines and toolkits to adapt them to EMBL’s current data protection strategy and operational needs.
- Draft SOPs/ guidelines/guidance as well as conduct legal research and documentation activities.
- Collaborate with cross-functional internal and external points of contact to effectively roll out the Data Protection Strategy, ensure regulatory compliance and mitigate organisational risks.
- Implement the different elements of EMBL’s Data Protection Strategy (e.g. privacy notices, DPIAs, register of processing activities, training and awareness campaigns, data breach response mechanisms and data breach register).
- Adapt and adjust systems, tools, processes and templates.
- Document, track and report relevant program metrics and milestones on the implementation of the Data Protection Strategy.
- Prepare reports, talking points and correspondence on data protection issues as required.
- Conduct training and awareness activities as required.

**Closing date**: 30 November 2024

Contract duration: 3 years (renewable up to 9 years)

Grading: 6 or 7; depending on experience and qualifications (monthly salary starting from 4.4k-5.3EUR after tax + other paid benefits)

Reference number: HD02745

You have

**Education**:

- Advanced university degree in relevant discipline (including but not limited to law, computer science, information technology) or related field with relevant work experience.
- LLM or Master of Law on data protection, privacy, computer and communications law, compliance, international, digital or media law is desired.
- Certifications such as CIPP/E/U and CIPM, CIPT is desired.
- Knowledge of international security management systems industry standards (ISO 27001, ISO 27701, NIST ) is desired.

**Experience**:

- At least 5 years of responsible professional experience in Data protection, Privacy and Information Security, in a consultancy firm and/or large public/private sector organization.
- Proven experience in building and implementing global Privacy and Data Protection compliance programs, operations and/or risk management programs in large corporations.
- Experience in conducting DPIAs, maintaining records of processing activities, of incident response management, drafting contracts, SOPs, policies and guidelines.
- Experience in operational risk management.
- Experience working in a global, large-scale, complex, and fast-paced environments.
- Experience working autonomously and as part of a team, well as to cooperate within a team.

**Knowledge and Skills**:

- In depth knowledge of Data protection, Privacy and Information Security regulations, international security standards and specific key legal issues;
- Solid understanding of information technologies and their impact in the protection of personal data (e.g. privacy by design and by default);
- Ability to identify Data Protection related risks and gaps based on local legal environment, developments and projects;
- Expert knowledge of data protection laws and practices in relevant fields (scientific research, life sciences, international organisations)
- Strong analytical interpersonal, communications and presentational skills;
- Demonstrated negotiating, cultural sensitivity and diplomatic skills;
- Demonstrated problem solving skills; client focus and results oriented;
- Effectiveness orientation and pro-activity;
- Strong sense of responsibility, confidentiality and accountability.

**Languages**:

- Fluency (level C) in English.
- Knowledge of French or German.

You might also have
- Previous work experience gained in an international and/or life sciences environment is advantageous.

Why join us

EMBL is curiosity-driven, community-oriented and international. As an inclusive, equal opportunity employer, we believe that diversity enables us to collaborate more effectively and be innovative in our approaches. EMBL offers attractive conditions and benefits appropriate to