Data Protection Expert

Work within the Local Data Protection Office, acting as part of the second line of defence, supporting oversight and advisory activities to ensure compliance with data protection obligations pursuant EU Regulation 679/2016 ("GDPR"), other legislations on personal data and contributing to the independent assessment of local and global programs impacting personal data, including aspects related to information security controls and data protection by design.

Key Responsibilities

Support second line oversight activities on data protection programs, contributing to the assessment of compliance with GDPR requirements and providing advisory to the business and first line functions, while gaining exposure to related information security and data protection controls.
Facilitate effective communication and awareness across the Bank, promoting a sound understanding of data protection requirements and their integration into business processes and controls.
Assist in the review and challenge of Data Protection Impact Assessments (DPIAs) and support the maintenance of the Record of Processing Activities.
Provide support in incident management, including second line review and challenge on data breach assessments, cooperating with IT and Security functions on security-related events, and supporting the evaluation of data subjects’ rights requests.
Review procedures, policies, guidelines relating to data protection domains, providing independent validation and recommendations for improvement, also considering technical and organisational security measures.
Perform second line controls and independent gap analysis, supporting the identification and tracking of remediation actions, including those related to data protection and information security measures.
Support the local training programs on data protection, contributing to awareness initiatives aimed at strengthening both compliance culture and secure handling of information.

Requirements
Education

Degree in Law or in computer science.
Master or equivalent post university specialization in data protection or computer science (preferred).

Required Experience

Experience of at least 2 to 4 years in data protection / legal / compliance / computer science.

Technical Skills

Strong knowledge on data protection laws and regulations.
Knowledge on information technology and computer science.
Excellent knowledge of Microsoft Office Suite.
Excellent in English both oral and written.

Soft skills

Attitude to work in a global team, cooperation value and influencing a global environment.
Mature and confident with strong interpersonal skills.
Ability to work independently, under pressure with commitment to tasks.
Strong organizational skills.
Curious and passionate in interpersonal relationship.

Values added

The ideal candidate is an effective communicator and a proactive problem solver, with a pragmatic and resilient mindset. An ability to balance regulatory requirements with business needs, along with an interest in data protection and information security topics, is key to being successful in this role.

Working conditions
Full Time
Duration
Permanent
Location
Milan (hybrid)
The benefits of joining ING

Super flexible smart working
Competitive base salaries and performance based bonuses
Diverse cultures & Innovative mindsets
International Environment
Commitment to sustainability
Lots of training development opportunities to help you grow
Lots of moments dedicated to physical and mental well-being
A special day off when it is your birthday: we call it #doyourbirthday!
And of course we can’t forget: free water & coffee at the office!

Our Commitment
Diversity is a fundamental element of our corporate culture, and we are fully committed to creating a safe and inclusive environment, based on mutual respect and the value of diversity, offering equal job opportunities to all qualified candidates.
#J-18808-Ljbffr