Data Protection and Data Protection Documentation Expert

Project overview

For our client, we are looking for an experienced expert for data protection assessments and documentation in the IT environment. The focus is on the independent creation, review, and quality assurance of data protection documentation for five IT systems within a heterogeneous application landscape. We are looking for a profile with at least five years of experience in data protection or compliance, sound knowledge of GDPR and BDSG, as well as practical experience with complex data protection assessments, international data transfers, cloud, and SaaS solutions.

The activity includes, among other things, processing activities, threshold analyses, balancing of interests, Transfer Impact Assessments, and Data Protection Impact Assessments, as well as technical coordination with information security, compliance, and data protection officers.

Responsibilities

Must-have Skills

Personal Requirements

-Framework Data-

• Technical execution, quality assurance, and release of data protection assessments and documentation in accordance with GDPR and internal data protection guidelines
• Creation and maintenance of descriptions or registers of processing activities
• Execution and evaluation of threshold analyses
• Creation and documentation of balancing of interests based on Art. 6 para. 1 lit. f GDPR
• Creation and evaluation of Data Flow System Assessments
• Execution and evaluation of Transfer Impact Assessments for processing outside the EU
• Creation and documentation of Data Protection Impact Assessments or DPIAs
• Coordination with the Information Security and Compliance departments as well as with Data Protection Officers
• Quality assurance and technical release of the created data protection documentation
• Data protection legal documentation of a total of five IT systems
• At least five years of professional experience in data protection or compliance
• Several years of experience in conducting complex data protection assessments
• Very good knowledge of GDPR, BDSG, and relevant data protection standards
• Sound knowledge of international data transfers and associated transfer mechanisms
• Experience with data protection management systems
• Knowledge of cloud, SaaS, and IT processes
• Good knowledge of information security and risk assessment
• Understanding of business processes and data flows
• Successfully completed studies with an IT focus or a comparable qualification
• Fluent German and English, both written and spoken
• Structured and careful working method in the creation of auditable data protection documentation
• High quality awareness and sense of responsibility
• Ability for cross-functional coordination with information security, compliance, and data protection officers
• Analytical understanding of complex business processes, IT systems, and data flows
• Start: immediately
• Contract Type: Service
• Duration / End: expected * months), option for extension

Project details

Utilization: 40 hours/week

• Start: ab sofort
• Remote: remote
• Location: München, Deutschland, DE
• Languages: German