Interim Technical Privacy Officer

Project overview

Please note! This role is only available for secondment/suppliers or for freelancers on the Starapple Interim payroll. We can tell you more about this by phone.

Project details

Description The Executive Board of Leiden University, on behalf of the Privacy Office department, is looking for an Interim Technical Privacy Officer. What will you do? As an Interim Technical Privacy Officer, you will work at the intersection of privacy law and information technology. You will configure the Privacy Office's privacy and GRC tooling and also participate in the team's regular second-line activities. You will be supported by the other members of the Privacy Office.

You will ensure that the Privacy Office's work processes are properly configured in the tooling and that colleagues within and outside the team can work with it independently. Your tasks include:

• You will configure the Privacy Office's privacy and GRC tooling (including TrustBound), including the processing register, workflows for Privacy Quickscans and DPIAs, the data breach register, supplier assessments, and associated reports and dashboards;
• You will translate the Privacy Office's policies and work processes into the configuration of that tooling, such as templates, questionnaires, assessment steps, roles, and authorizations;
• You will create integrations with the existing environment, such as TOPdesk, and migrate existing registers and overviews to the tooling;
• You will set up functional management, document the configuration, and train colleagues and decentralized contact persons in using the tooling (e.g., by writing manuals, creating videos, and giving training sessions);
• You will advise on technical and organizational measures for new systems, including access control, logging, pseudonymization, and encryption, and assess whether suppliers have demonstrably implemented these measures;
• You will handle tickets in the regular second-line service provision of the Privacy Office. You will assess Privacy Quickscans, support DPIAs, advise on processor agreements and data exchange agreements, and handle data breaches;
• Where necessary, you will be the point of contact for a number of organizational units, particularly the IT organization, and monitor the progress of managing privacy risks there;
• You will collaborate with the team according to the Privacy Office's procedures. Where will you work? The Privacy Office of Leiden University fulfills a second-line role in ensuring privacy within the organization. You will join an ambitious and friendly team of approximately eight colleagues. We work hard, but we also enjoy humor. The Privacy Office is part of the Directorate of Information Management and works closely with the Security Office. You will work partly on location, partly at faculties, and partly from home. What drives us? Making a difference for researchers, employees, students, and everyone within and around the university. We ensure that privacy is not an obstacle, but a solid foundation for trust, research, and development. Your activities (Focus, principles, and objectives) As an Interim Technical Privacy Officer, your focus will be on configuring the tooling with which the Privacy Office performs its work. You will bring registers, assessments, and reports together in one environment as much as possible and configure the work processes within it. You will guide the team and decentralized units in its use. Additionally, you will participate in the team's regular second-line activities. You will handle tickets, assess Privacy Quickscans, support DPIAs, advise on processor agreements and data exchange agreements, and handle incidents. The division between configuration work and regular activities will be agreed upon with you per period. The guiding principle in your work is a pragmatic, service-oriented approach. You work accurately, switch gears quickly, and know how to set priorities. Your goal is to help internal clients quickly and effectively, thereby contributing to an organization where privacy is experienced as a positive, value-adding force. The configuration you deliver must be manageable and further developable by the team itself after your assignment. Requirements
• You have a WO (university level) work and thinking level with a completed relevant education, such as law, information science, or computer science.
• You have demonstrable experience with configuring or functionally managing privacy or GRC tooling such as TrustBound or a comparable platform. You are familiar with the configuration of registers, workflows, questionnaires, authorizations, and reports from the inside.
• You have experience with privacy advisory in a second-line role, for example, as a privacy officer, advisor, or lawyer.
• You possess good and up-to-date knowledge of the GDPR and related laws and regulations and can translate this into concrete requirements for systems and processes.
• You have knowledge of information security and IT architecture. You read technical documentation and understand data flows and integrations. You can converse with architects, functional managers, and suppliers at an equal level.
• You are fluent in Dutch and proficient in English. The working language and writing language is Dutch. You communicate clearly in speech and writing.
• You are organizationally sensitive and can communicate at all levels of the organization. You stand firm in your shoes but remain service-oriented.
• You work independently and proactively take on tasks. You recognize when you are stuck and actively seek collaboration with colleagues. Conversely, you are willing to assist when the situation requires it. Wishes Recent experience in the education sector (HBO or WO) is a plus. Knowledge of TOPdesk and Trustbound is a plus. A certification such as CIPT, CIPM, or CIPP/E is a plus.
• Start: 2026-11-22T23:00:00
• Location: Leiden Zuid-Holland, NL
• Languages: Dutch