Data Protection Consultant

Reporting directly to the head of the Privacy Area within the Legal Department, your mission will be to provide support to this area in all activities related to personal data protection. You will support the definition, execution, and implementation of all initiatives to allow the Organization to continue reinforcing all its processes in the field of privacy and thus achieve an ever-increasing level of maturity while minimizing any risk to which we may be exposed.

Work with all business areas to reinforce and maintain the company's "governance" regarding data protection.

• Reinforce and keep the Company's Data Protection Governance updated on a recurring basis.
• Participate in the creation, modification, implementation, and monitoring of Privacy and Information Security Policies.
• Preparation, participation, minute-taking, and monitoring of action plans derived from committees related to privacy and information security at a local level.
• Preparation, participation, and monitoring in Compliance Audits regarding data protection regulations and monitoring of action plans.
• Management of the Company's Data Protection Officer's email.
• Generation of KPIs related to data protection.
• Keep the Company's Records of Processing Activities updated.
• Support in the management of security breaches that may occur within the Company.
• Ensure the performance of data protection impact assessments for all the company's products and services.

Support and assist in the development of the area's planning and objectives.

• Support the head of the area in the definition of annual objectives and ensure their achievement.
• Identify and make recommendations for changes in matters related to data protection and adaptation to meet business needs.
• Identify and make recommendations for solutions to business challenges.

Ensure compliance with data protection regulations.

• Monitor and implement any legislative updates or doctrine (guides) issued by the data protection regulator or that may impact our business.
• Identify vulnerabilities in our processes that may have an impact on privacy and strengthen them.
• Performance of Legal Analyses on privacy matters with business impact.
• Continuous review and updating of all types of legal disclaimers included in all types of documentation, contracting conditions, scripts, or Company sites.
• Resolution of all types of data protection inquiries and business support.
• Management and preparation of written responses to Administrative Proceedings received from the AEPD.
• Review of contracts with providers or collaborators who, within the framework of service provision, process personal data.

• Participate in projects and meetings with Verisure Group teams and coordinate their development and implementation in the Region countries (Portugal, Italy, and LatAm countries).
• Export "best practices" in data protection matters to Region countries.
• Support to countries in any matter regarding data protection that may arise.

Collaboration with the IT Security Area on matters that have an impact on data protection.

• Given the relationship between data protection and information security, the relationship and communication with the IT Security area must be fluid; therefore, we must guarantee coordination with them on any matter that may have an impact on data protection.