Data Privacy Expert

Allianz Services is part of Allianz Group, one of the world's leading insurers and asset managers and has succeeded in becoming one individual business segment by combining various businesses from different parent companies. Allianz Services is running service delivery operations in Romania, India, Mauritius, and Morocco as well as is operating Consulting hubs in Germany, USA, Italy, France, and Singapore with almost 6000 colleagues globally.

Allianz Services Romania has a key role in the transformation of the Group by improving operations and creating a superior experience for customers, offering actuarial, financial, IT, HR and governance services. Our team counts over 1000 passionate professionals whose main assets are the expertise and top qualifications, combined with multilingual skills, ranging from English, German, French and Italian, to Portuguese, Spanish and Romanian.  

At Allianz Services Romania, we aim to attract best talents and create an inspiring environment for our people to develop, while unceasingly caring for our community and for shaping a better future together!

Job role

The Data Privacy expert provides advice on compliance with existing data privacy processes or policies as well as developing any procedures for the privacy programs. Performs assessments of data privacy impact and security risks within the organization; Implements and tracks execution of risk-based analysis, privacy controls and measures, including regular monitoring of the controls in in the  organisation and its affiliates or local entities.

What you will do

• Developing, maintaining and implementing  data privacy  governance management data privacy system  in accordance with  applicable data privacy laws and regulations, the Allianz Privacy Standard (APS) and Binding Corporate Rules (BCRs)
•  Provide data privacy advice and review relevant Supplier/ Customer Contract
•  Handling enquiries from data subjects on issues relating to data privacy practices, particularly on the exercise of data subjects’ rights such as withdrawal of consent, the right to be forgotten, and other related rights
•  Consulting on personal data incidents, including advising on data breach notifications, resolutions and remedial actions, where appropriate
•  Prepare the roll out of Allianz Data Privacy Trainings, track the completion rate and support organisation and its affiliates or local entities for issues relating training in order to ensure an adequate level of privacy knowledge and awareness
•  Develop, prepare and roll out Data Privacy awareness campaigns in order to ensure an adequate level of privacy knowledge and awareness
•  Set up and maintain the Record of Processing Activities within One Trust tool
•  Initiate and perform Privacy assessments ( Privacy Impact Assessments & TIA)
•  Conducting Data Privacy onsite and offsite controls in accordance with internal Policies and Regulation and as part of Internal Control System
•  Conduct on site and off site  Vendor Assessments with the focus on compliance with data processing agreements and effective implementation of the agreed technical and organizational (security) measures (TOMs).
•  Support Data Privacy team on  the whole control lifecycle: perform the analysis, document the results, draft report documentation after the finalization of the reviews, propose remediation measures and align with stakeholders
•  Monitoring and Tracking of remediation measures/ identified issues
•  Prepare ad hoc or regular data privacy reports to Management

What you bring

• Strong academic background (master/university diploma or degree in economics, legal or similar disciplines)
•  Minimum 5 years experience  in a similar position (data privacy, risk management, internal control, compliance)
•  Solid understanding and expertise with complex regulatory framework/requirements in terms of Data Protection (GDPR) and security systems (ISO)
•  Proficiency and experience with One Trust Tool functionalities
•  A good understanding of process & control design and re-engineering principles;
•  Understanding of Information technology systems and their connection in relation to data protection, collection and processing
•  Excellent communication skills, negotiation skills and assertiveness
•  Initiative and a sense of responsibility
•  Strong analytical thinking skills and the ability to quickly grasp and process complex relationships in a way that is appropriate for the addressee
•  Integrity, impartiality, responsibility and confidentiality
•  Microsoft Office products
•  Proven experience in risk analysis and controls frameworks
•  Data Privacy Certifications (IAPP) would be a plus ;
•  Proven command of the English and German/French language (verbal and written);

You have

• Strong stakeholder management and influencing skills;
•  Excellent communication skills, with the ability to convey compliance and corporate governance issues effectively;
•  Awareness of the business impact, the need for and justification of compliance and corporate governance;
•  Ability to communicate and explain the context of need for control, regulations etc. and the benefits of taking action.