Chief Data Privacy Manager

The Data Protection Officer (DPO) is a critical role within our organization, responsible for ensuring compliance with relevant data protection regulations. The ideal candidate will possess a strong understanding of GDPR and national data protection frameworks, with excellent communication and interpersonal skills.

1. Monitor compliance internally to ensure the business and its functions comply with applicable legal and regulatory requirements.
2. Identify, define, and track the regulatory environment in the country and monitor compliance with regards to applicable legislation and respective policies.
3. Evaluate the organization's data processing activities, ensure data privacy according to local laws and requirements, and consider risks associated with processing operations.
4. Prepare and update internal rules and procedures for personal data protection of Branch & Group Subsidiaries in Greece.
5. Provide advice and instructions on how to conduct Data Protection Impact Assessments (DPIAs) and records of processing activities (RoPA's) and monitor implementation.
6. Plan and implement adequate monitoring and control systems to secure a high level of compliance within the entire organization and monitor data management procedures.
7. Develop and oversee control systems to prevent or deal with violations of legal requirements and internal policies, conduct respective risk assessments, and propose mitigations.
8. Ensure timely involvement in all projects and maintain compliance with in-force legislation.
9. Handle any communication received from data subjects concerning their personal data and exercising their rights under the Regulation. Monitor, prepare responses, or advise when preparing responses in these cases.
10. Prepare and review contracts with third parties for personal data processing.
11. Implement measures and monitor corrective actions plans related to any audit findings or recommendations on Regulatory Compliance and Data Protection areas as per the findings of the Group Internal Audit department, any External Auditors.
12. Prepare materials and training for staff to enhance their skills in the implementation of personal data protection in the Branch and the Group as well as other Regulatory issues (conflict of interest, anti-bribery whistleblowing).
13. Prepare opinions on matters concerning the collection, processing, storage, and protection of the personal data of customers and on requests for information containing personal data, as well as complaints from customers regarding the use of their personal data.
14. Prepare an annual GDPR plan, Annual report as well as regular reports to Senior Management.
15. Cooperate with the Hellenic Data Protection Authority and act as a contact point on issues related to the processing of personal data, including prior consultation.