Data Protection Officer in München bei Mitel

Mitel

At Mitel, you will have the opportunity to help businesses connect, collaborate and provide better experiences for our customers. You will deliver valuable contributions in creating business success within our global organization utilizing your unique attributes, skills and experience.

Please take a moment to look over this opportunity and if interested, feel free to send us your application. If this is not the right opportunity for you, you can also sign up for Job Alerts by creating an account. This will give you a profile that you can use for all future applications, and you will be notified whenever a new position that matches your criteria becomes available.

Overview:

Mitel is looking to recruit an experienced Data Protection Officer (DPO) to meet its obligations under the European Union (EU) General Data Protection Regulation (GDPR) as well as privacy law obligations in other jurisdictions in which Mitel operates. The DPO will monitor compliance and data practices internally to ensure the business and its functions comply with the applicable requirements under the GDPR and other privacy laws. The DPO will be responsible for staff training, data protection impact assessments, and internal audits. The DPO will also serve as the primary contact for supervisory authorities and individuals whose data is processed by the organization.

Responsibilities:

In this role, you will work closely with the Legal, Compliance and Information Security functions to develop and monitor policies and standards applicable to the business and in compliance with the GDPR. Duties will include:
Implementing measures and a privacy governance framework to manage data use in compliance with the GDPR and other privacy laws, including developing templates for data collection, assisting with data mapping, and vendor management reviews.
Working with key internal stakeholders in the review of projects and related data to ensure compliance with local data privacy laws, and where necessary, in conjunction with legal complete and advise on privacy impact assessments.
Serving as the primary point of contact and liaison for the Lead Supervisory Authority and other EEA Data Protection Authorities on all data protection related matters under the GDPR.
Serving as the primary point of contact for queries in the business.
Reviewing vendor contracts (including Model Clauses) and consents needed to implement projects in partnership with the Mitel’s procurement and Information Security functions, and ensuring filing requirements with local regulators are achieved.
Participating in the Operational Risk Council.
Managing and conducting ongoing reviews of Mitel’s privacy governance framework.
Monitoring changes to local privacy laws and making recommendations to the Operational Risk Council when appropriate.
Setting standards and reviewing policies and procedures globally that meet the requirements under the GDPR and any localization requirements in countries of operation.
Developing and delivering privacy training to various business functions.
Developing strategies and initiatives to ensure engagement with key internal and external stakeholders.
Coordinating and conducting data privacy audits.
Collaborating with the Information Security function(s) to raise employee awareness of data privacy and security issues and providing training on the subject matter.
Collaborating with the Information Security function(s) to maintain records of all data assets and exports and maintaining a data security incident management plan to ensure timely remediation of incidents including impact assessments, security breach response, complaints, claims or notifications, and responding to subject access requests (SARs).
Ensuring that Mitel’s IT systems and procedures comply with all relevant data privacy and protection law, regulation and policy (including in relation to the retention and destruction of data).
Working with designated privacy law lawyers across the Mitel’s offices and, where necessary, outside counsel to help advise on local data privacy law issues.
Promoting effective work practices, working as a team member, and showing respect for co-workers

Requirements:

Law degree from an accredited law school (preferred).
Hold at least one Data Protection and/or Privacy certification such as, CIPP, CIPT, ISEB, etc., (preferred).
Experience in EU data privacy laws as well as Canadian and US privacy laws.
7 years’ experience within a compliance, legal, audit and/or risk function, with recent experience in privacy compliance and operations.
Experience in developing policy and compliance training.
Experience working in a reg