Data Protection Counsel

Let’s start with the role

We are seeking a proactive and detail-oriented Data Protection Counsel to join KAIZEN’s EU data protection team. The successful candidate will play a critical role in data protection compliance operations. This role involves working closely with cross-functional teams to implement appropriate operating procedures, conduct risk assessments, and ensure that data handling practices align with industry best practices.

• Compliance and Risk Management: Ensure compliance with data protection and e-privacy laws, including GDPR, and other relevant local or international regulations. Advise departments on various data protection-related risks, obligations, and other privacy issues. Support privacy-related projects driven by the Group DPO; 
• Contract review: Negotiate and draft contractual wording on data protection requirements with various stakeholders;
• Data Protection Impact Assessments (DPIAs): Prepare or contribute to impact assessments as needed; 
• Policy/SOP Development: Develop, implement, and maintain data protection policies, procedures, and records per legal entity;
• Training and Awareness: Conduct regular training sessions to ensure awareness of data protection obligations;
• Auditing and Reporting: Monitor compliance with internal data protection policies, conduct regular audits, and report on key metrics to the Group DPO;
• Third-Party Management: Ensure that third-party vendors and partners meet data protection requirements and contractual obligations.

What you’ll bring:

• Bachelor's degree in Law;
• Excellent Knowledge of data protection laws; CIPP/E, CIPM or equivalent data protection certification preferred;
• Minimum of 3 years of experience in data protection ideally including one year of experience in the online gambling sector or another highly regulated industry (e.g. banking);
• Excellent command of  English;
• Excellent communication skills, with the ability to explain legal concepts to non-experts;
• Experience working with legal, tech, AI teams to ensure seamless data protection operations;
• Exposure to data protection management tools and/or software;
• In-depth knowledge of data protection laws, including GDPR and ePrivacy;
• Experience with data protection audits, drafting policies and standard operating procedures and DPIAs.