Group Data Privacy Advisor (Luxembourg - Germany)

Quintet Luxembourg, , LUX, L-2955
Stroke 3Created with Sketch.
< Back to search Apply Now

Purpose of the Job

 

This position is to be filled in Luxembourg or Germany. 

 

At Quintet Private Bank (Europe) S.A. and its affiliates (the “Group”), we are committed to ensuring that personal data is protected, and that our work complies with data protection legislation. 

We handle Personal Data in accordance with applicable data protection laws, regulations where our affiliates are located (up to 7 countries) and/or where the customers/prospects may be contacted in function of our business activities abroad considering our group expansion.

 

For the compliance of our German entity, we are seeking a Group Data Privacy Advisor specialized in German data protection laws to guide the German entity by providing  advice and good practice to the Country managers/line managers/staff. 

 

In this role, you’ll often be asked to discuss with all the levels of the hierarchy and be the contact point for data subject requests/ claims as well as German Data Protection Authorities.

You’ll deploy leadership attitude to convince and ensure that legal/contractual and operational data protection measures are effectively in place at German entity and provide specific data protection controls to check by 1st Line of Defense and 2nd Line of Defense control monitoring programme.

You will be joining a DPO team of 7 Data Protection experts very motivated, working together with complementary expertise in business  domains (i.e. Marketing, IT, HR,…) and country laws.

 

The successful candidate will be able to perform gap analysis between different regulations and determine how we should adapt our policy/ procedures to cope with the differences. 

He/she should also be able to provide data protection advice also to any other entities of the group and define global strategy to be reported to Group Head of DPO and Group Data Protection Committee and Board.

He/She has excellent organizational, communication, and management skills, and also the ability to lead training sessions and workshops with members of staff.

Key Accountabilities

 

a) Well understanding and deep analysis of the different regulations and laws

 

• Deploy gap analysis regarding local data protection regulation 
• Define data protection cross border manuals for business relationships
• Provide data protection advice based on regulations and laws and good practices for implementation
• Assess adequacy of data protection agreement as well as standard contractual clause related to data protection
• Leverage on contractual clauses and policies and translate them into local environment

 

b) Take an active role in the review of processing with personal data 

 

• Deploy and maintain Quintet Europe Record of Processing Activities (RPA) and other  inventories  (IT asset/ 3rd parties/3rd countries transfer) within one centralised tool  (onetrust)   
• Review data protection impact assessment ("DPIA") and data protection by design/by default analysis at earliest stage of any Quintet Europe project  and provide a central DPO opinion
• Review Data protection due diligence/certification of  outsourced services
• Challenge the control’s assessment from the 1st LoD & their testing regarding data protection risk  (RCSA) and assess their maturity level

 

c) Main Contact point for data subject/ Authorities

 

• Answer to Data Subject exercise request (DSR) and complaint in collaboration with Data Protection delegates
• Maintain the consolidated register of data subject right exercise request and data breaches up to date
• Escalate residual risk to Group DPO and Lead Supervisory Authority when there is a residual data subject risk associated to a  breach or  a “High risk” associated to a new processing or a  DPIA performance

Knowledge and Experience


- Expertise in national data protection laws and practices including an in-depth understanding of the GDPR
- Sound Legal & data protection background
- Some experience in one or (preferably) several of the following areas: IT, compliance, risk management, audit, business process, information security
- Knowledge of banking activities and services.

Attributes and Qualities


- Ability to learn quickly and acquire expertise needed
- Strong communication skills, ability to bridge the gap between technical and business languages

Languages Skills

 

- Fluent in English and German as a minimum

< Back to search Apply Now