- Training organization employees on GDPR compliance requirements;
- Conducting regular audits and assessments to ensure GDPR compliance;
- Serving as the point of contact between War Child and the relevant supervisory authority;
- Maintaining records of all data processing activities conducted by the organization;
- Responding to data subjects to inform them about how their personal data is being used and what measures War Child has put in place to protect their data;
- Ensuring that data subjects’ requests to see copies of their personal data or to have their personal data erased are fulfilled or responded to, as necessary;
- Receiving comments and questions from data subjects related to the processing of their personal data and the GDPR;
- Informing the organization and the staff of their obligations under the GDPR and any other applicable EU member state data protection provisions;
- Monitoring the organization’s compliance with the GDPR and any other applicable EU member state data protection provisions, train staff on compliance, and perform audits;
- Performing data protection impact assessments;
- Acting as the focal point for the data protection supervisory authority on matters relating to the processing of personal data and other matters, where appropriate;
Knowledge and Experience
- Over 5 years of experience in working with EU and global privacy laws, including drafting of privacy policies, technology provisions, and working on compliance
- Experience working with IT programming or infrastructure, including certification in information security standards
- Experience in performing audits of information systems, attestation audits and risk assessments
- Experience in legal and technical training and in awareness raising
- Experience in dealing successfully with different business cultures and industries
- Demonstrated leadership skills achieving stated objectives coordinating with a diverse set of stakeholders and managing multiple projects at once
- Demonstrated ability to continuously coordinate with multiple parties and supervisors while maintaining independence
- Demonstrated communication skills to address different audiences, from the board of directors to data subjects, from managers to IT staff and lawyers
- Demonstrated self-starter with ability to gain required knowledge in dynamic environments and remain up-to-date on cutting-edge developments
- Demonstrated record of engaging with emerging laws and technologies