ph3Job Summary /h3pWe are seeking a highly experienced and proactive Global Data Privacy Officer (DPO) to lead our internal data protection strategy. This key role will ensure that our organization processes personal data of customers, employees, and partners in compliance with global regulations, including EU GDPR, UK GDPR, Brazilian LGPD, and other emerging international laws. The ideal candidate will be a subject matter expert in data rights, providing strategic guidance to senior leadership, managing high‑stakes DSAR requests, and fostering a robust, privacy‑first culture. /ph3Essential Job Duties /h3ollipGlobal Compliance Monitoring Strategy /pulliServe as the primary point of contact for data protection authorities and lead the organization’s response to data protection inquiries and investigations. /liliMonitor global privacy law changes, interpret their implications, and implement necessary updates to internal data processing activities. /liliDevelop, implement, and maintain internal data privacy policies, procedures, and data governance frameworks across all operational regions. /liliMaintain comprehensive Records of Processing Activities (RoPA). /li /ul /lilipData Subject Access Requests (DSARs) Data Rights /pulliOwn and manage the end‑to‑end DSAR process, ensuring timely and compliant responses to data access, rectification, erasure, and portability requests globally. /liliDevelop robust, scalable processes to identify, locate, and process sensitive data across various organizational systems. /liliEvaluate complex data requests, ensuring the protection of individuals’ rights while balancing third‑party confidentiality. /li /ul /lilipRisk Management Privacy by Design /pulliOversee Data Protection Impact Assessments (DPIAs) for high‑risk processing, new products, and vendor technologies. /liliCollaborate with IT/Security teams to ensure technical safeguards (encryption, data minimization) are implemented by design.



/liliConduct audits to proactively address compliance vulnerabilities. /li /ul /lilipIncident Response Breach Management /pulliLead the investigation and management of data breaches, ensuring effective response and containment. /liliCoordinate notifications to regulatory authorities and affected individuals within legal timelines. /li /ul /lilipTraining Cultural Transformation /pulliFoster a proactive data protection culture through employee training and awareness programs. /liliAct as a "privacy evangelist," providing actionable guidance to HR, Marketing, and Engineering teams. /li /ul /li /olh3Competency /h3ulli7+ years of dedicated data privacy experience, with at least 3 years in a senior or global role managing complex privacy programs. /liliDeep understanding of GDPR (EU UK), with experience in Brazilian LGPD, CCPA/CPRA, or other international laws. /liliProven track record of managing complex DSAR requests, including in‑depth data mapping, redacting, and navigating legal exceptions. /liliDemonstrated ability to work independently, report to top management, and challenge data processing activities without conflict of interest. /liliBachelor’s degree in Law, IT, or related field. A Master’s degree is preferred. /liliIAPP Certifications (CIPP/E, CIPM, or CIPT) are highly desirable. /liliFluency in English is required; Italian or French is a strong advantage given the locations. /li /ulh3Key Competencies /h3ulliStrategic Thinking: Ability to translate complex regulations into practical business requirements. /liliCommunication: Exceptional verbal and written communication skills to educate staff and interact with stakeholders at all levels. /liliProblem‑Solving: Strong analytical skills to assess privacy risks and implement mitigating controls. /li /ulh3EEO Statement /h3pAbercrombie Kent is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. /p /p #J-18808-Ljbffr

📌 Data Privacy Officer (Milano)
🏢 Abercrombie & Kent (Monaco) SAM
📍 Milano