Researcher - Locality Expert (Automotive)

Description de poste

Chief Technology Officer

• Créteil

Type de contrat : CDI-Temps plein

Fonction : Fonctions Support - Assurance & Juridique

Intitulé du poste : Data Protection Officer H / F

Description de la mission

Role reporting to the EVP Governance, Risk and Compliance.

Scope and organization

The scope of the Group Data Protection Office covers all GEODIS activities worldwide.

The Group Data Protection Officer relies on a network of Data Protection Correspondents in the Regions, Lines of Business and Functions. These Correspondents are not fully dedicated to Data Protection (DP), they combine this role with IT and / or Compliance functions in their organization and ensure first-level answers for the missions described below.

Mission and key activities

1. is the central point of contact to inform and provide expert advice on all matters related to Data Protection;
2. leads, supports and monitors the activity of the Correspondents on a second level;
3. collaborates with all Functions (notably legal, HR, procurement, IT, marketing and sales), all Regions and Lines of Business, and develops strategies and initiatives to ensure engagement with key stakeholders;
4. promotes a culture of Data Protection across the Group; develops, arranges and delivers training (e-learning, in-presence, webinar, etc.) on Data Protection to employees and managers who are involved in data handling all over the Group;
5. continuously evaluates and monitors compliance with Data Protection standards; prepares, launches, monitors and analyzes self-assessments to evaluate the existing Data Protection framework and identify areas of improvement;
6. drafts new and updates existing Data Protection policies, guidelines, and procedures, in consultation with key stakeholders;
7. reviews and drafts contractual clauses or Data Protection agreements to adapt standards or review partner models (for any processing with a Data Protection risk); liaises with the internal process owners and the third-party data controllers or processors to identify the best approach and advise accordingly;
8. monitors compliance with Data Protection regulations wherever the Group operates; monitors adaptation to local privacy laws in coordination with local Correspondents; follows-up with changes in law and major sanctions in order to issue recommendations in a continuous improvement approach;
9. participates to all projects involving personal data to ensure privacy by design;
10. ensures documentation of data processing for proper accountability; helps identifying and evaluating data processing activities, notably those with higher risk; and provides advice on how to conduct Data Protection Impact Assessments (supporting tool OneTrust).

The Group Data Protection officer will be the main interlocutor of the CNIL.

Profil du candidat

Education and experience

1. University degree or law degree in a relevant topic (data protection, privacy, compliance, ethics, IT security, etc)
2. Minimum 10 years' experience within a compliance, legal, privacy function, with recent significant experience in Data Protection.
3. Solid knowledge of EU GDPR and national data protection laws
4. Holds at least one Data Protection and / or Privacy certification.

Skills

1. Excellent verbal and written communication skills in English and French;
2. Knowledge of information technology, security systems and data management systems;
3. Ability to interact effectively with people at all organizational levels of the Group;
4. Change and project management skills, including the ability to manage a network of Correspondents based in multiple jurisdictions, to prioritize effectively and handle multiple deadlines;
5. Ability to handle confidential and sensitive information with the appropriate discretion.

The statements contained in this position description are not necessarily all-inclusive; additional duties may be assigned and requirements may vary from time to time.

Lieu de prise de service : Europe, France, Île-de-France, Hauts-de-Seine

Ville(s) : LEVALLOIS-PERRET

Critères candidat

Niveau d'études min. requis : BAC+5 / MASTER

Niveau d'expérience dans la fonction : Confirmé (5 à 10 ans d'expérience)

Langues : Anglais (Maitrise Courante)