Establishing Data Protection/Privacy monitoring and response processes increasing awareness and know the organisation cooperate closely with stakeholders in line org and projects. Coordinate requests and investigations Support and guide in procurement of external suppliers. Organise and structure data processing descriptions.
Further development of our compliance culture where data protection compliance is an integrated part of our bus strategy by that:
- Guide in developing a culture of compliance and managing stakeholder relations related to GDPR (intern external); meanwhile creating an open and trustful environment Create implement and monitor a data protection compliance process for all projects and initiatives (incl. followup regular updates)
- Monitor key providers data protection compliance requirements in alignment with business owners.
- Review project plans to mitigate data protection risks presented conduct DPIAs external providers due diligence of projects IT design data protection agreements and runphase governance compliance.
- Draft steer and implement procedures for reviews and monitoring of internal controls.
- Create and conduct compliance training and awareness programs for both employees and project managers.
- Review HR processes identify data protection risks and provide solutions; incl. support in risk mitigation
Being the functional lead of the HR DPCs in their DPC tasks:
- Proactive alignment and coordination of crossHR compliance standards
- Develop coordinate and follow up on HR internal minimum requirements
- Support the risk management team with the risk assessment within the GDPR compliance area.
Scope for data protection topics (as above):
- Projects and initiatives within our organizations People & Culture
- Delivery/service processes within the organizations People & Culture process landscape
- Suppliers to our organizations People & Culture
Requirements
- 57 years of experience working with Data Protection/Privacy topics in international (European) companies
- Excellent knowledge of GDPR
- Excellent English skills
- The Swedish language is a merit