• Handling data subject access requests (DSAR’S) and customer queries/complaints. 
• Maintaining procedures and SLAs for handling DSARs, right to be forgotten requests and recording all relevant information on the internal database
• Liaising with other departments to collect all data necessary to meet SLAs. 
• Building knowledge of DSAR exemptions to ensure exemptions are applied accurately.
• Reviewing DSAR procedures to ensure adherence to all requirements and to drive continuous improvement in existing processes.
• Executing GDPR compliance work including GDPR compliance activities, data protection impact assessments, data mapping services to aid in addressing risk management issues that comply with GDPR requirements
• Writing briefs on above topic areas. 
• Building a proven knowledge of data protection to become a subject matter authority in the area
• Contributing to internal GDPR-related projects, to ensure organisational compliance with all processes and procedures, including internal training of staff interfacing with Data Protection.

Skills: DSAR Handling, SLA Oversight, Data Liaison, GDPR Execution, Compliance Review, Risk Support, Privacy Advocacy, Training Leadership

• Be the point of contact for all Data Procession communication, both inside the company and with external 3rd parties
• Assess the data protection requirements and obligations arising from contractual obligations towards customers and suppliers
• Ensure compliance with relevant data processing and protection laws that the company is subject to
• Ensure the company has the required policies and processes in place
• Instill a culture of data protection throughout the group
• Increase awareness of, and educate, the employees and partners, in areas relevant to data protection
• Keep abreast of the latest developments in GDPR and relevant international data protection laws
• Ensure that Data Subjects Rights Requests are attended to in line with relevant legal requirements
• Assist the Legal team with review of Data Protection Agreements 
• Conduct Data Protection Impact Assessments and maintain Records of Processing
• Assist in the investigation of Data Breaches
• Ensure that processors and 3rd parties are monitored for Data Protection compliance
• Remain abreast of relevant knowledge

Skills: Compliance Liaison, Risk Assessment, Policy Management, Cultural Integration, GDPR Education, Rights Coordination, Impact Analysis, Breach Investigation

• Follow all legislation, updates, decisions/guidelines and other directions of the relevant authority, especially KVKK
• Follow the work, notification, correspondence and transactions to be carried out with the relevant authorities, to make the necessary applications and transactions
• Leading the KVKK Compliance Team with a legal perspective and managing the activities to be carried out by the relevant team
• Planning and executing the studies required for continuous compliance with the relevant legislation, informing and directing the relevant units that need to take action, preparing legal texts such as policy / enlightenment text / express consent text and revising them according to needs
• Making evaluations, giving opinions and taking necessary actions within the framework of the legislation that may come to the fore regarding data in all activities at home or abroad
• Evaluating all legal texts that may come to the fore such as confidentiality agreement, personal data protection agreement, data transfer agreement, undertaking all data-related activities such as data acquisition/sharing/transfer with third parties, ensuring compliance with the legislation
• Evaluating the Product/Application/Software (mobile or web) in terms of data-related legislation at the design stage and directing the units in terms of requirements
• Reporting the activities carried out to the management.

Skills: Legislative Compliance, Authority Correspondence, Team Leadership, Compliance Planning, Legal Evaluations, Contract Compliance, Software Assessment, Compliance Reporting

• Provide support to the business with the completion, delivery and overall management of Data Protection Impact Assessments ('DPIAs')
• Take the lead on the creation of a suite of Legitimate Interests Assessments ('LIAs')
• Support the business with the implementation and ongoing management of their Registers of Processing Activities ('RoPAs')
• Support in the production, management and delivery of relevant information in respect of Data Protection related topics to relevant committees, forums and/or senior management.
• Work with the DPO to identify, develop and manage key data protection objectives, policies and processes in line with regulatory requirements and developing business strategy
• Play a critical role in the identification, monitoring and mitigation of data protection risk(s) across the business
• Provision of timely information to the business relating to updates, or changes to, applicable Data Protection legislation and/or regulator guidance, including advising the business of the anticipated impact.
• Monitoring data subject requests and queries.
• Advising other areas in projects involving personal data (HR, Marketing, IoT projects, etc.).
• Training and awareness actions related to data protection.

Skills: DPIA Management, LIA Leadership, RoPA Oversight, Data Compliance Reporting, Policy Collaboration, Risk Mitigation, Legislative Advising, Training Coordination

• Assist Colt group with EU and international data privacy laws, GDPR and international privacy law compliance
• Support the compliant privacy program for the global organisation
• Perform data privacy training and advise key internal stakeholders
• Respond and manage data incidents drafting privacy documents, carrying out data protection compliance projects, negotiate data transfer agreements
• Assist Colt´s vendors in the process of conducting data protection impact assessments.
• Drive a culture of privacy and security by design at all levels
• Write and update detailed guides on data protection practices, procedures and policies
• Track changes in law and anticipate possible changes in operational approach
• Identify, evaluate and document the company’s data processing activities
• Assist with the management of incident response and any notification obligations.
• Draft relevant documents, contracts and agreements ensuring key contracts are GDPR compliant
• Support the Group's affiliates with any queries relating to GDPR
• Manage data protection incidents as required, liaising with external regulators
• Take a key GDPR advisory role on all projects
• Ensure Colt BCR compliance and regulation including multi-jurisdictional personal data issues

Skills: Privacy Law Assistance, Compliance Support, Training Implementation, Incident Management, Cultural Leadership, Policy Documentation, Legal Monitoring, GDPR Advisor

• Solid knowledge of GDPR and national data protection laws
• Familiarity with computer security systems
• Ability to handle confidential information
• Ethical, with the ability to remain impartial and report all non-compliances
• Strong attention to detail, research and analytical skills
• Result-oriented and good interpersonal skills
• Excellent planning and time management/prioritization skills
• Ability to work independently and also to liaise with other departments
• Good knowledge of Microsoft Office Package

Qualifications: BS in Computer Science with 3 years of Experience

• A background in understanding data protection, with a strong technical knowledge and competence level in this area.
• Confident and able to operate credibly with senior staff members.
• Strong communication skills as well as an ability to accurately identify key issues and communicate them broadly.
• Experience with GDPR/data privacy within the pharma industry
• Experience or knowledge of pharmaceutical drug access services
• Experience with senior stakeholders
• Dynamic, motivated self-starter
• Experience in a relationship selling role with good knowledge of technical products, vendors and families of technologies
• Strong oral and written communication skills with customers, support personnel and executives

Qualifications: BS in Information Technology with 4 years of Experience

• Background in data protection and a solid understanding of IT systems and processes involved in gathering, storing, transferring and collecting data. 
• Good working knowledge gained at a commercial organization with demonstrable involvement in data privacy compliance. 
• Knowledge and application of compliance with UK, EU and international privacy laws 
• Good academic history and proven data privacy skills, combined with a strong ability to provide pragmatic solutions.
• Demonstrate that can thrive in a team with high professional standards and a flexible client-friendly commercial approach.
• Excellent knowledge of data protection laws, regulations, and guidance (e.g., GDPR, DPA 2018, ePrivacy Regulation, CCPA, LGPD).
• Experience working within a complex, global business.
• Experience in working to design and improve processes.
• Excellent written and verbal communications skills, good organizational and time management skills.
• Professional experience with Fintech/cryptocurrencies
• Professional certification (e.g., CIPP/E, CIPM).

Qualifications: BS in Cybersecurity with 5 years of Experience

• Knowledge of European data protection laws and practices, including in-depth understanding of the General Data Protection Regulation (GDPR), as well as professional experience in this area 
• Technical knowledge of information technology and data processing systems.
• Well-developed and professional interpersonal skills with the ability to interact effectively with people at all organizational levels of GfK 
• Excellent writing and presentation skills.
• Strong change and project management skills, including the ability to manage time well, prioritize effectively and handle multiple deadlines.
• Ability to handle confidential and sensitive information with the appropriate discretion.
• Experience in the area of Data Protection in a bank, financial institution, FinTech firm, or well-known audit company /consultancy firm with financial services focus.
• Good knowledge of EU data protection regulation and interest in data protection evolving legislation worldwide.
• Excellent written and spoken German and English skills.
• High self-motivation to work and develop in data protection compliance.
• Excellent social skills, hands-on mentality.

Qualifications: BS in Information Systems with 3 years of Experience

• Experience in reviewing contracts in Polish and in English
• Proficient and practical knowledge of the provisions of personal data
• Fluency in both written and spoken English and Polish languages (including the vocabulary related to personal data protection)
• Experience in working in an international environment
• Ability to work independently, accuratly and timely on performed tasks
• Communicativeness, assertiveness, proactivity
• Highly detail-oriented, organized, proactive, efficient, and resourceful with exceptional follow-through skills
• Proficiency with Google Suite applications (Gmail, Drive, Slides, Docs, Sheets, Calendar) and Slack

Qualifications: BS in Data Science with 2 years of Experience