Cybersecurity and Data Protection Manager

MISSION
We are looking for a highly skilled and experienced Data Protection Manager to join our team. This role will be responsible for overseeing our Cybersecurity and Data Protection strategy and ensuring compliance with GDPR and other relevant Cybersecurity and Data Protection laws in Germany and France. The ideal candidate will have a strong understanding of data protection regulations and cybersecurity practices.

Responsibilities And Functions

• Responsibilities of the role include, but are not limited to, understanding and delivering the requirements of local regulatory and global data protection and cybersecurity initiatives, risk management, third-party assurance, disaster recovery and vulnerability management.
• Develop and implement cybersecurity and data protection policies and procedures to ensure compliance with GDPR, Cybersecurity policies and local cyber and data protection laws in Germany and France.
• Conduct regular Cybersecurity and Data Protection audits and assessments to identify and mitigate risks.
• Identify and classify all personal data processing activities, ensuring that the processing register is always up to date, classify processing according to risk, applying the corporate risk methodology assessment tool.
• Ensure there is a data controller for each of the processing and that the required data protection requirements and controls are identified and implemented.
• Take the role identified in the incident response procedure when there is a data or cyber breach.
• Serve as the primary point of contact for data protection subjects in Germany and France.
• Ensure any request received from cybersecurity and data protection authorities or data subjects are processed in time and form, as established by each country legislation and by internal rules.
• Provide expert advice and guidance on data protection and cybersecurity matters to internal stakeholders.
• Monitor and report on data protection and cybersecurity compliance and performance.
• Conduct data protection impact assessments (DPIAs) and ensure appropriate measures are in place to protect personal data.
• Train and educate employees on data protection and cybersecurity best practices and compliance requirements.

Profile/Requirements

• Bachelor's degree in Law, Information Security, Cybersecurity, or a related field.
• Minimum of 5 years of experience in data protection, cybersecurity, or a related field.
• In-depth knowledge of GDPR and local data protection laws in Germany and France.
• Knowledge and awareness of security standards including ISO 27000 series and ISA/IEC 62443 series.
• Knowledge and awareness of the NIS 2 Regulations and equivalent European legislation.
• Experience in managing data protection and cyber security audits and collecting evidence to demonstrate compliance with reviewed requirements such as GDPR, ISO27001, among others.
• Experience and understanding of technical due diligence.
• Significant experience in engineering industry.

Desirable Skills

• Certified Information Privacy Professional/Europe (CIPP/E) or equivalent certification is preferred.
• Industry recognised qualifications such CISA, CISM, CISSP or any SANS certifications.
• Languages: Proficiency in German and/or French is highly desirable. Other useful languages: Spanish.

What We Offer

• Global leader in green energy: Actively contribute to the energy transition.
• Career development: Diverse training opportunities and long-term growth prospects.
• Language courses: German, English, and Spanish.
• Mobility: Subsidy for the Germany Ticket (BVG).
• Employee discounts: Attractive offers from partners in retail, travel, and more.
• Compensation: Performance-based salary that values your contribution.

Información Movilidad
Tenga en cuenta que cualquier solicitante que no sea ciudadano del país de la vacante estará sujeto al cumplimiento de los requisitos de inmigración aplicables para trabajar legalmente en ese país.

December