DPO, Compliance Expert

About us – we are a challenger bank in Southeast Europe and regional leader in alternative payment solutions, building an ecosystem by combining financing and shopping to address customers' needs. Our successful business model and customer-focus approach allowed us to be one of the most profitable and efficient banks in the region. We currently serve customers in Romania, Germany, Bulgaria & Lithuania.

We have now expanded our global footprint in Greece with thousands of merchants and consumers. Do you want to play a key role in our unique success story?

If yes, we are looking for a DPO, Compliance Expert to join our Team in Greece

About The Role:

Data Protection Officer, member of the Country Compliance Department, will monitor compliance internally to ensure the business and its functions comply with the applicable legal and regulatory requirements.

What you get to do in this role:

• Informs and advises the management and the employees of the Branch & Group Subsidiaries in Greece about their obligations under the General Data Protection Regulation and the applicable data protection legislation.

• Identifies, defines and tracks the regulatory environment in the country and monitors compliance with regards to the applicable legislation, and with the respective policies in force.

• Identifies and evaluates the organization's data processing activities, ensures Data privacy according to the local laws and requirements and considers the risks associated with the processing operations, taking into account the nature, scope, context and purposes of the processing.

• Prepares and updates internal rules, procedures for personal data protection of the Branch & Group Subsidiaries in Greece.

• Provides advice and instructions on how to conduct Data Protection Impact Assessments (DPIAs) and records of processing activities (RoPA's )and monitors its implementation.

• Plans and implements adequate monitoring and control system to secure a high level of compliance with the entire organization and monitor data management procedures to provide guidance on alternations to comply with regulations.

• Develops and oversees control systems to prevent or deal with violations of legal requirements and internal policies conducts respective risk assessments and propose mitigations.

• Actively involved in all projects in a timely manner and ensures compliance with in force legislation.

• Handles any communication received from data subjects concerning their personal data and exercising their rights under the Regulation. Monitors, prepares a response or advises when preparing a response in these cases.

• Prepares and reviews contracts with third parties for personal data processing.

• Implements measures and monitors corrective actions plan related to any audit findings or recommendations on Regulatory Compliance and Data Protection areas as per the findings of the Group Internal Audit department, any External Auditors.

• Prepares materials and training for staff to enhance their skills in the implementation of personal data protection in the Branch and the Group as well as other Regulatory issues (conflict of interest, anti-bribery whistleblowing)

• Prepares opinions on matters concerning the collection, processing, storage and protection of the personal data of customers and on requests for information containing personal data, as well as complaints from customers regarding the use of their personal data.

• Prepares an annual GDPR plan, Annual report as well as regular reports to Senior Management.

• Cooperates with the Hellenic Data Protection Authority and acts as contact point on issues, related to the processing of personal data, including prior consultation.