Repsol is a global multi-energy provider headquartered in Madrid, operating across the entire energy value chain including exploration, production, refining, and renewable energy. As a major player in the global energy market, the company is at the forefront of the energy transition, being the first in its industry to commit to net-zero emissions by 2050.

In Spain, Repsol maintains a massive footprint with its central hub at Campus Repsol in Madrid and several industrial complexes throughout the country. For international professionals, the company offers a highly structured corporate environment with significant opportunities in engineering, digital technology, and sustainability, supported by a culture that values diversity and professional growth.

Repsol was founded in 1987 following the reorganization of the Spanish energy sector. It has since evolved from a state-owned oil company into a global, publicly traded multi-energy leader committed to sustainability.

For international professionals

Headquartered at the sustainable 'Campus Repsol' in Madrid, which serves as a central hub for international corporate talent.
Offers specialized 'Talent Energy' programs designed to recruit and train junior professionals from diverse backgrounds.
Leading the energy transition in Spain, creating numerous roles for experts in wind, solar, and green hydrogen.
Employs a diverse workforce representing over 70 nationalities, fostering an inclusive and multicultural professional environment.
Provides robust internal mobility and career development paths within its global network of offices and industrial sites.

Legal Counsel Data Protection and Privacy Compliance

Repsol

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

We explore and discover the limitless possibilities of energy so we can all progress. We believe in the power of talent to shape the future. That's why we're looking for curious, bold individuals who are eager to grow and create new ways forward-people who want to join us in building a more sustainable, innovative, and inclusive world.
We strongly believe that diversity fuels creativity and innovation. That's why we welcome professionals who are ready to grow, learn, and bring their perspective to the energy challenges of today and tomorrow.
Here, you'll find a place to grow and unlock your full potential.

Key Information:

Team: Compliance Privacy / General Directorate of Legal Affairs

Location: Madrid, Spain

Experience level: 3 years

Job type:Hybrid

Requirements:EnglishC1 or higher +University Degree inLaw or Law or Business Administration.

The team you are joining:

If you want to join an innovative team of specialists, are highly motivated, are interested in Compliance, have great analytical capacity, result orientation, a problem-solving profile, the ability to manage complex matters, and synthesis and communication skills, come and be part of our team!

Main tasks:

Governance and compliance model: implementation and maintenance of the data protection framework, monitoring of action plans, reporting and management of privacy tools.

Business advisory and privacy by design: supporting business areas and project teams in integrating privacy into products, services, and new technologies.

Risk analysis and impact assessments: identification and recording of processing activities, risk analysis, and data protection impact assessment reports.

Management of data subject rights and security incidents: handling the exercise of rights and managing security breaches, including notification to the supervisory authority and affected parties.

Third parties, contractual and privacy policies: review and negotiation of data protection clauses with providers, third-party due diligence, international transfers, and updating of privacy policies and legal notices.

Training and awareness: design and development of data protection training and awareness plans for the organization.

Audit and relationship with supervisory authorities: collaboration in internal audits of

What we offer:

Permanent contract

Bonus based on objectives

Medical insurance

Pension plan contribution

Digital disconnection

Work-life balance measures

Legal advice

Employee support services

You will fit the position if:

You have a University Degree inLaw or Law or Business Administration.

You have worked at least3 years in data protection and privacy services/areas.

You speak English fluently with an approximate level of C1.

You have a strong technological orientation and openness toward digital tools, procedure automation, and artificial intelligence.

Other valuable aspects:

Cross-functional IT-Compliance knowledge and experience (Information Security, Data Protection, Cybersecurity, etc).

Additional master's degree, postgraduate degree, or certifications in Data Protection, Compliance and Risk, Risk Management and Internal Control (CESCOM, COSO, CRISC, COBIT, CIPP/E, CIPM or other recognized privacy certifications),

Master's in Corporate Legal Advisory, New Technologies, Intellectual Property.

#LI-PR1

View original advert (Spanish)

We explore and discover the limitless possibilities of energy so we can all progress. We believe in the power of talent to shape the future. That's why we're looking for curious, bold individuals who are eager to grow and create new ways forward-people who want to join us in building a more sustainable, innovative, and inclusive world.
We strongly believe that diversity fuels creativity and innovation. That's why we welcome professionals who are ready to grow, learn, and bring their perspective to the energy challenges of today and tomorrow.
Here, you'll find a place to grow and unlock your full potential.

Información clave:

Equipo: Compliance Privacy / Dirección General de Asuntos Legales

Localización: Madrid, España

Nivel de experiencia:3 años

Tipo de trabajo:Híbrido

Requisitos:inglésC1 o superior +Grado Universitario enDerecho o Derecho o ADE.

El equipo al que te unes:

Si quieres unirte a un equipo de especialistas innovador, estás altamente motivado, te interesa el Compliance, tienes una gran capacidad analítica, orientación a resultados, perfil resolutivo, capacidad de gestión de asuntos complejos, y habilidades de síntesis e interlocución ¡ven a formar parte de nuestro equipo!

Principales tareas:

Governance y modelo de cumplimiento: implantación y mantenimiento del marco de protección de datos, seguimiento de planes de acción, reportingy gestión de herramientas de privacidad.

Asesoramiento al negocio y privacidad desde el diseño: acompañamiento a las áreas de negocio y equipos de proyecto en la integración de la privacidad en productos, servicios y nuevas tecnologías.

Análisis de riesgos y evaluaciones de impacto: identificación y registro de actividades de tratamiento, análisis de riesgos e informes de evaluación de impacto en protección de datos.

Gestión de derechos de los interesados e incidentes de seguridad: atención al ejercicio de derechos y gestión de brechas de seguridad, incluyendo la notificación a la autoridad de control y a los afectados.

Terceros, contractual y políticas de privacidad: revisión y negociación de cláusulas de protección de datos con proveedores, debida diligencia de terceros, transferencias internacionales y actualización de políticas de privacidad y avisos legales.

Formación y sensibilización: diseño y desarrollo de planes de formación y concienciación en protección de datos para la organización.

Auditoría y relación con autoridades de control: colaboración en auditorías internas de

Qué ofrecemos:

Contrato indefinido

Bonus según objetivos

Seguro médico

Aportación a plan de pensiones

Desconexión digital

Medidas de conciliación

Asesoría legal

Servicios de apoyo al empleado

Encajarás en el puesto si:

Tienes un Grado Universitario enDerecho o Derecho o ADE.

Has trabajado al menos3 años en servicios/áreas de protección de datos y privacidad.

Hablas inglés de manera fluida con un nivel aproximado de C1.

Tienes una fuerteorientación tecnológica y apertura hacia herramientas digitales, automatización de procedimientos e inteligencia artificial.

Otros aspectos valorables:

Conocimientos y experiencia transversal IT-Compliance (Seguridad de la Información, Protección de Datos, Ciberseguridad, etc).

Titulación adicional de máster, postgrado o certificaciones en Protección de Datos, Compliance y Riesgo, Gestión de Riesgos y Control Interno (CESCOM, COSO, CRISC, COBIT, CIPP/E, CIPM u otras certificaciones reconocidas en privacidad),