UNIR (Universidad Internacional de La Rioja) is a leading private online university that specializes in distance learning for higher education. As part of the Proeduca group, it serves tens of thousands of students across Spain and Latin America, offering a vast catalog of accredited undergraduate and postgraduate degrees in various fields including law, business, and education.

Headquartered in Logroño with a major corporate presence in Madrid, UNIR is a key employer for academic professionals, digital marketing specialists, and EdTech experts. The university is particularly attractive to international hires due to its global reach and the increasing demand for multilingual academic coordinators and professors with international research backgrounds.

Founded in 2008 in Logroño, UNIR was established to provide accessible online higher education. It has since grown into one of the largest online universities in the Spanish-speaking world and is the flagship institution of the Proeduca Altus group.

For international professionals

Operates on a 100% online education model, which often translates to flexible or hybrid work arrangements for corporate and academic staff.
The university is a major player in the Spanish-speaking world, providing opportunities for professionals to work on projects spanning Spain, Mexico, Colombia, and Peru.
Frequently recruits ANECA-accredited faculty and researchers, making it a viable path for international academics looking to enter the Spanish university system.
Main offices are located in Logroño (La Rioja) and Madrid, offering options for those preferring either a smaller city with a high quality of life or a major European capital.

Data Protection Specialist

UNIR

This job was originally posted in Spanish and automatically translated to English.

Requirements

Experience: 2-4 years in consulting or in-house, with practice in DPIA, Art. 28 contracts, transfers, breaches, exercise of rights, etc.
Education: Law Degree, Master's in: Data Protection, New Technologies, or Compliance. **Certifications will be positively valued: DPO under the AEPD-DPD Scheme and exposure to ISO 27701/27001.
Languages: English B2

Benefits

Stable contract
Location: Pozuelo de Alarcón (3 min from Pozuelo Renfe station).
Full-time, hybrid model located in Madrid (first 3 months 100% in-person).
Schedule: Mon to Thu from 9:00 to 18:15 and Fri from 9:00 to 14:00 (1h flexible between entry and exit).
Flexible remuneration plan (health insurance, gourmet card, nursery and transport vouchers).
Package of 26 vacation days and 4 personal days.
Discounts of up to 80% on UNIR's educational offer.

Job Description

At GRUPO PROEDUCA, we are looking for a Data Protection Specialist to ensure compliance with GDPR, LOPDGDD, and international standards. Their scope covers governance, compliance processes, risk management, and cross-functional coordination with multiple areas.

🧩 What will your functions be?

Governance and regulatory framework: design, maintenance, and updating of the Privacy Management System, collaborating in the development of associated policies, procedures, and controls.
Record of Processing Activities (ROPA): Management and maintenance, ensuring its update and the collection of necessary information from the different business areas.
Impact Assessments (DPIA): risk analysis, treatment plans, and integration of privacy by design/default in projects.
Third-party management: review and negotiation of agreements, technical/organizational measures, and contractual control together with the Legal and Procurement teams.
International transfers: conducting TIAs, use of SCCs, and definition of safeguards (pseudonymization, encryption, localization).
Breach management: coordination with Security, impact assessment, notification to authorities/affected persons, and complete traceability documentation.
Data subject rights: comprehensive cycle management, verification, deadlines, reasoned responses, and evidence.
Audits and metrics: Collaborate in internal audits and compliance reviews, monitoring action plans and privacy controls.
Relationship with authorities: preparation of responses, regulatory monitoring, and translation of regulatory changes into operational actions.
Training and culture: design and delivery of awareness plans by area with effectiveness evaluation.
Cross-functional coordination: Work in a coordinated manner with the Technology, Security, Legal, and Business areas to ensure compliance with data protection principles in new projects and initiatives.

🎓 What are we looking for?

Experience: 2-4 years in consulting or in-house, with practice in DPIA, Art. 28 contracts, transfers, breaches, exercise of rights, etc.
Education: Law Degree, Master's in: Data Protection, New Technologies, or Compliance. **Certifications will be positively valued: DPO under the AEPD-DPD Scheme and exposure to ISO 27701/27001.
Languages: English B2

📍 What do we offer you?

Stable contract
Location: Pozuelo de Alarcón (3 min from Pozuelo Renfe station).
Full-time, hybrid model located in Madrid (first 3 months 100% in-person).
Schedule: Mon to Thu from 9:00 to 18:15 and Fri from 9:00 to 14:00 (1h flexible between entry and exit).
Flexible remuneration plan (health insurance, gourmet card, nursery and transport vouchers).
Package of 26 vacation days and 4 personal days.
Discounts of up to 80% on UNIR's educational offer.

The EDUCATIVO Group is firmly committed to equal opportunity and diversity, thereby creating an environment free from all discrimination.

#LI-DZ1

View original advert (Spanish)

En GRUPO PROEDUCA, buscamos un Especialista en Protección de Datos, para garantizar el cumplimiento del RGPD, LOPDGDD y estándares internacionales. Su alcance abarca la gobernanza, los procesos de cumplimiento, la gestión de riesgos y la coordinación transversal con múltiples áreas.

🧩 ¿Cuáles serán tus funciones?

Gobernanza y marco normativo: diseño, mantenimiento y actualización del Sistema de Gestión de Privacidad, colaborando en la elaboración de políticas, procedimientos y controles asociados.
Registro de Actividades (RAT): Gestión y mantenimiento, asegurando su actualización y recopilación de la información necesaria con las distintas áreas de negocio.
Evaluaciones de Impacto (EIPD/DPIA): análisis de riesgos, planes de tratamiento e integración de privacy by design/default en proyectos.
Gestión de terceros: revisión y negociación de acuerdos, medidas técnicas/organizativas y control contractual junto al equipo Jurídico y Compras.
Transferencias internacionales: realización de TIAs, uso de SCCs y definición de salvaguardas (pseudonimización, cifrado, localización).
Gestión de brechas: coordinación con Seguridad, valoración de impacto, notificación a autoridades/personas afectadas y documentación de trazabilidad completa.
Derechos de los interesados: gestión integral del ciclo, verificación, plazos, respuestas motivadas y evidencias.
Auditorías y métricas: Colaborar en auditorías internas y revisiones de cumplimiento, realizando seguimiento de planes de acción y controles de privacidad.
Relación con autoridades: preparación de respuestas, seguimiento regulatorio y traducción de cambios normativos en acciones operativas.
Formación y cultura: diseño y entrega de planes de concienciación por áreas con evaluación de eficacia.
Coordinación transversal: Trabajar de forma coordinada con las áreas de Tecnología, Seguridad, Jurídico y Negocio para garantizar el cumplimiento de los principios de protección de datos en nuevos proyectos e iniciativas.

🎓 ¿Qué buscamos?

Experiencia: 2-4 años en consultoría o in‑house, con práctica en DPIA, contratos art. 28, transferencias, brechas, ejercicios de derechos, etc.
Formación: Grado Derecho, Máster en: Protección de Datos, Nuevas Tecnologías o Compliance. **Se valorará positivamente certificaciones: DPD bajo Esquema AEPD‑DPD y exposición a ISO 27701/27001.
Idiomas: Inglés B2

📍 ¿Qué te ofrecemos?

Contrato estable
Ubicación: Pozuelo de Alarcón (a 3min estación Renfe Pozuelo).
Jornada completa, modelo híbrido ubicación Madrid (primeros 3 meses 100% presencial).
Horario: de L a J de 9:00 a 18:15 y V de 9:00 a 14:00 (1h flexible entre entrada y salida).
Plan de retribución flexible (seguro médico, tarjeta gourmet, cheques guardería y de transporte).
Paquete 26 días de vacaciones y 4 días de asuntos propios.
Descuentos de hasta 80% en la oferta formativa de UNIR.

El Grupo EDUCATIVO está firmemente comprometido con la igualdad de oportunidades y la diversidad, logrando con ello crear un entorno libre de toda discriminación.

#LI-DZ1