What does the day-to-day look like?
You will join the Group Data Office (GDO), part of the Technology & Operational Performance (TOP) teams, which plays a central role in defining and steering data and artificial intelligence (AI) governance and usage across the Group.
The GDO defines and oversees Group-wide frameworks, governance and standards relating to data quality, data protection and privacy, as well as artificial intelligence, while supporting their implementation in close collaboration with Business Lines and Group Functions.
It is organised around four streams: AI Office, Data Management, COO & Transverse, and Data Privacy & Protection.
The Data Privacy & Protection stream defines and manages the Group’s data protection and privacy framework and ensures compliance with applicable regulations (such as the GDPR) throughout the entire data lifecycle, through harmonised policies, standards and operational guidelines.
In a transversal coordination role, it supports the deployment of this framework and contributes to related initiatives such as data security and data classification.
It also coordinates the implementation of data protection regulations, particularly obligations linked to cross-border data transfers, and contributes to raising awareness and fostering a data protection and privacy culture across the Group.
By joining the Data Privacy & Protection team, you will operate across a transversal scope and collaborate with all GDO streams, as well as key partners such as LEGAL, RISK and IT GROUP.
As a Data Privacy & Protection Expert, your role will encompass the following responsibilities:
Data protection governance, policies and standards
You will actively contribute to the definition, evolution and deployment of Group policies, guidelines, methodologies and tools in the field of Data Privacy & Protection. You will help adapt them to regulatory developments and to the operational contexts of the entities. You will ensure overall consistency of the governance framework across the entire data lifecycle and support its adoption by relevant stakeholders.
Cross-functional coordination and support to entities
You will work in close and continuous coordination with key Group stakeholders, particularly LEGAL, RISK and IT GROUP teams, as well as with Data Offices and local experts within the entities (Data Protection Officers (DPOs), Chief Information Security Officers (CISOs), etc.).
You will facilitate the operational implementation of policies and methodologies, provide expert support to both project activities and business-as-usual operations, and contribute to the "GDO as a service" approach for the benefit of the entities.
Culture, expertise and continuous improvement
You will contribute to building awareness across the Group on data protection and data ethics topics. You will take part in coordinating cross-functional initiatives, sharing best practices and strengthening the maturity of existing frameworks. You will proactively suggest enhancements to existing frameworks by incorporating field feedback, regulatory developments and new data use cases, within a continuous improvement approach.
What’s next?
This role will enable you to play a key part in the Group’s Data transformation, with a strong cross-functional dimension and exposure to strategic projects on an international scale.
You will evolve in a dynamic, fast-changing environment that fosters expertise development, initiative and continuous improvement, with opportunities for growth and internal mobility within the Group.
Are you our next Data Privacy and Protection Expert?
Yes, if you have at least 4 years of experience in project management, consulting, or data-related roles.
You are fluent in both English and French.
This role is aimed at candidates who can translate regulatory frameworks into operational solutions, in close alignment with business challenges. Legal expertise is an advantage, although a legal background is not required.
You have the following skills:
* A solid understanding of data governance challenges and key Data Privacy & Protection concepts
* Practical knowledge of regulatory governance issues: ability to understand and manage requirements related to personal data (cookies, data transfers, data protection notices, etc.) from both an operational and governance perspective
* Project management capabilities: ability to structure approaches, define processes, tools, indicators, and governance and change management mechanisms
* Ability to work in a transversal manner within multicultural and multi-geographical environments. Strong analytical skills, attention to detail, and the ability to synthesise information
