Data Protection Counsel

The Data Protection Counsel is responsible for ensuring compliance with data protection and e-privacy laws, including the GDPR. The role involves advising various departments on privacy risks, negotiating data protection contracts, developing internal policies, and acting as the Data Protection Officer (DPO) or primary contact point for designated entities and markets.

Key Responsibilities

• Data Protection Compliance and Risk Management: Ensure compliance with data protection and e-privacy laws (including GDPR) and other relevant local or international regulations. Advise departments on privacy-related risks and support privacy projects driven by the Head of Data Protection.
• DPO Duties: Serve as the Data Protection Officer or contact point for designated entities and markets, fulfilling all associated statutory duties and responsibilities.
• Contract Review: Negotiate and draft contractual wording regarding data protection requirements with various internal and external stakeholders.
• Impact Assessments: Conduct and contribute to Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Privacy Impact Assessments (PIAs).
• Policy Development & Record keeping: Develop, contribute to, and maintain data protection policies, procedures, and applicable records, including in relation to data processing activities.
• Training and Awareness: Develop, contribute to, and deliver tailored training and awareness programs across departments to ensure all employees understand their data protection obligations.
• Auditing and Reporting: Monitor compliance with internal data protection policies, by reviewing or auditing internal practices, reporting key metrics and findings to the Head of Data Protection.
• Third-Party Management: Conduct reviews of third-party vendors and partners, ensuring they meet data protection requirements and contractual obligations, including Data Processing Agreements as required. 
• Incident Management: Identify, assess, mitigate, and communicate data breach incidents both internally and externally, and conduct lessons-learned meetings with involved stakeholders.
• Data Subject Requests: Contribute to the training and oversight of Privacy Ambassador Teams to ensure proper handling of Data Subject and Requests from Supervisory Authorities , developing tailored procedures for specific markets.
• Expansion Support: Ensure compliance with local privacy laws in new markets during expansion projects and integrate new market privacy regulations into the organization’s policies.

Educational Background & Experience

• Bachelor's degree in Law.
• CIPP/E, CIPM, or equivalent data protection certifications are considered an asset.
• Minimum of 3 years of experience in data protection, ideally including one year of experience in the online gambling sector or another highly regulated industry (e.g., banking).
• Exposure to new technologies and AI is desirable.

General Skills & Competencies

• Excellent command of English with exceptional communication skills and the ability to explain complex legal concepts to non-experts.
• In-depth knowledge of data protection laws, including GDPR and ePrivacy.
• Proven experience working collaboratively with legal and tech teams to ensure seamless data protection operations.
• Hands-on experience with data protection audits, drafting policies, standard operating procedures, and DPIAs.
• Strong analytical and problem-solving skills, with the ability to manage diverse problems that require deep analysis and creative thinking.
• Strong ability to work collaboratively and effectively with cross-functional team members.
  
  

Kaizen Gaming Perks

• • 🕑 Hybrid way of working
  • 🏃 A buddy will support you with your onboarding
  • 💸 Competitive pay and bonus scheme
  • 👩‍⚕️ Private health insurance for you and your family
  • ⭐Developmental 360° feedback framework
  • 📚 Unlimited access to Udemy & continuous training
  • 👨‍👩‍👧‍👦 Family Support

#LI-Hybrid

#LI-GS1