Serve as the primary point of contact for data protection authorities and lead responses to data protection inquiries and investigations Monitor global privacy law changes, interpret implications, and implement updates to internal data processing activities Develop, implement, and maintain data privacy policies, procedures, and data governance frameworks across operational regions Maintain comprehensive Records of Processing Activities (Ro PA) Own and manage the end-to-end global DSAR process, including access, rectification, erasure, and portability requests Develop scalable processes to identify, locate, and process sensitive data across organizational systems Evaluate complex data requests while balancing individual rights and third-party confidentiality Oversee Data Protection Impact Assessments (DPIAs) for high-risk processing, products, and vendor technologies Collaborate with IT and Security teams to implement technical safeguards such as encryption and data minimization by design Conduct audits to proactively address compliance vulnerabilities Lead investigation and management of data breaches, including response and containment Coordinate regulatory and affected-individual notifications within legal timelines Foster a proactive data protection culture through employee training and awareness programs Provide actionable privacy guidance to HR, Marketing, and Engineering teams Requirements 7+ years of dedicated data privacy experience At least 3 years in a senior or global role managing complex privacy programs Deep understanding of EU GDPR and UK GDPR Experience with Brazilian LGPD, CCPA/CPRA, or other international privacy laws Proven track record managing complex DSAR requests,



including data mapping, redacting, and legal exceptions Ability to work independently, report to top management, and challenge data processing activities without conflict of interest Bachelor's degree in Law, IT, or a related field IAPP certifications such as CIPP/E, CIPM, or CIPT are highly desirable Fluency in English is required Italian or French is a strong advantage Strong strategic thinking, communication, analytical, problem-solving, and stakeholder-management abilities Core Competencies
Demonstrates extensive expertise in data privacy management, including compliance with EU GDPR, UK GDPR, and other international privacy laws.
Capable of developing and implementing data privacy policies, managing DSAR processes, and fostering a proactive data protection culture within organizations.
Highest-signal resume keywords Data Privacy Management EU GDPR Compliance DSAR Process Management Data Protection Impact Assessments IAPP Certification ATS Optimization Keywords Hard Skills Data Mapping Data Governance Frameworks Records of Processing Activities Data Breach Management Privacy Policy Development Technical Safeguards Implementation Compliance Audits Data Processing Activities Evaluation Sensitive Data Processing Privacy Law Interpretation Soft Skills Strategic Thinking Communication Analytical Problem-Solving Stakeholder Management Independence Certifications & Qualifications CIPP/E CIPM CIPT Industry Keywords Data Protection Authorities Global Privacy Laws Data Processing Activities Employee Training Programs Regulatory Notifications Tools & Technologies Encryption Data Minimization Tools Compliance Management Systems Privacy Management Software #J-*****-Ljbffr

📌 Data Privacy Officer (Milano)
🏢 Jobtailor
📍 Milano