GDPR Privacy Expert - Assurance

Project overview

Context

As part of strengthening its personal data governance framework, the Global Data Office wishes to reinforce its team to support the structuring and organization of first-line defense activities in Privacy and personal data protection.

The mission covers both the Corporate role as an entity, with its own obligations and processes regarding personal data protection, and its role in animating and coordinating Privacy initiatives across countries and entities.

It will also clarify interactions and responsibilities between the different scopes and stakeholders involved, particularly between Corporate and France.

The mission requires above all strong operational expertise in GDPR and Privacy frameworks, ideally acquired in the insurance sector or, failing that, in a regulated financial environment. This is not a mission focused on IT, architecture, cybersecurity, or Privacy tooling.

Missions

More broadly, contribute to the formalization of a coherent, operational LOD1 Privacy framework clearly articulated between Corporate, France, and countries, specifying the necessary roles, responsibilities, processes, and interfaces.

• Identify, formalize, and organize the missions of LOD1 Privacy within the Corporate scope as an entity, particularly concerning the register of processing activities, requests for exercise of rights, incidents related to personal data and DLP, impact assessments / DPIA, GCL, awareness-raising, and the animation of Corporate functions.
• Map existing Privacy processes, their stakeholders, responsibilities, and interactions, building on work already done for France. Identify prerequisites, particularly concerning personal data transfers, and any potential improvements.
• Identify, formalize, and organize the missions of LOD1 Privacy Corporate in its supervisory and animation role for countries and entities, particularly in terms of community animation, common procedures, and governance principles.
• Identify and clarify the links between the Corporate and France scopes, especially topics at the border of the two scopes, respective responsibilities, and the role of the Global Data Office concerning initiatives and work carried out in France.

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French