Description

In this role, you will lead the Cybersecurity and Data Protection strategy, ensuring compliance with GDPR and local laws. Your day-to-day responsibilities will include conducting audits, providing expert guidance, and training employees on best practices to safeguard personal data.

Requirements

• •Bachelor's degree in Law, Information Security, Cybersecurity, or related field
• •Minimum of 5 years of experience in data protection, cybersecurity, or related field
• •In-depth knowledge of GDPR and local data protection laws in Germany and France
• •Knowledge of security standards including ISO 27000 series and ISA/IEC 62443 series
• •Knowledge of the NIS 2 Regulations and equivalent European legislation
• •Experience in managing data protection and cybersecurity audits
• •Experience and understanding of technical due diligence
• •Significant experience in engineering industry
• •Certified Information Privacy Professional/Europe (CIPP/E) or equivalent certification preferred
• •Industry recognised qualifications such as CISA, CISM, CISSP or SANS certifications
• •Proficiency in German and/or French highly desirable; Spanish useful

Tasks

• •Oversee Cybersecurity and Data Protection strategy
• •Ensure compliance with GDPR and local laws
• •Develop and implement data protection policies
• •Conduct regular audits and assessments
• •Identify and classify personal data processing activities
• •Maintain an up-to-date processing register
• •Assign data controllers for processing activities
• •Respond to data or cyber breach incidents
• •Act as the primary contact for data protection in Germany and France
• •Process requests from authorities and data subjects promptly
• •Provide expert advice on data protection matters
• •Monitor and report on compliance and performance
• •Conduct data protection impact assessments
• •Train employees on data protection best practices

Benefits