Serve as the primary point of contact for data protection authorities and lead responses to data protection inquiries and investigations
Monitor global privacy law changes, interpret implications, and implement updates to internal data processing activities
Develop, implement, and maintain data privacy policies, procedures, and data governance frameworks across operational regions
Maintain comprehensive Records of Processing Activities (RoPA)
Own and manage the end-to-end global DSAR process, including access, rectification, erasure, and portability requests
Develop scalable processes to identify, locate, and process sensitive data across organizational systems
Evaluate complex data requests while balancing individual rights and third-party confidentiality
Oversee Data Protection Impact Assessments (DPIAs) for high-risk processing, products, and vendor technologies
Collaborate with IT and Security teams to implement technical safeguards such as encryption and data minimization by design
Conduct audits to proactively address compliance vulnerabilities
Lead investigation and management of data breaches, including response and containment
Coordinate regulatory and affected-individual notifications within legal timelines
Foster a proactive data protection culture through employee training and awareness programs
Provide actionable privacy guidance to HR, Marketing, and Engineering teams
Requirements
7+ years of dedicated data privacy experience
At least 3 years in a senior or global role managing complex privacy programs
Deep understanding of EU GDPR and UK GDPR
Experience with Brazilian LGPD, CCPA/CPRA, or other international privacy laws
Proven track record managing complex DSAR requests, including data mapping, redacting,



and legal exceptions
Ability to work independently, report to top management, and challenge data processing activities without conflict of interest
Bachelor's degree in Law, IT, or a related field
IAPP certifications such as CIPP/E, CIPM, or CIPT are highly desirable
Fluency in English is required
Italian or French is a strong advantage
Strong strategic thinking, communication, analytical, problem-solving, and stakeholder-management abilities
Core Competencies
Demonstrates extensive expertise in data privacy management, including compliance with EU GDPR, UK GDPR, and other international privacy laws. Capable of developing and implementing data privacy policies, managing DSAR processes, and fostering a proactive data protection culture within organizations.
Highest-signal resume keywords
Data Privacy Management
EU GDPR Compliance
DSAR Process Management
Data Protection Impact Assessments
IAPP Certification
ATS Optimization Keywords
Hard Skills
Data Mapping
Data Governance Frameworks
Records of Processing Activities
Data Breach Management
Privacy Policy Development
Technical Safeguards Implementation
Compliance Audits
Data Processing Activities Evaluation
Sensitive Data Processing
Privacy Law Interpretation
Soft Skills
Strategic Thinking
Communication
Analytical Problem-Solving
Stakeholder Management
Independence
Certifications & Qualifications
CIPP/E
CIPM
CIPT
Industry Keywords
Data Protection Authorities
Global Privacy Laws
Data Processing Activities
Employee Training Programs
Regulatory Notifications
Tools & Technologies
Encryption
Data Minimization Tools
Compliance Management Systems
Privacy Management Software
#J-*****-Ljbffr

📌 Data Privacy Officer (Milano)
🏢 Jobtailor
📍 Milano