Data Privacy Specialist

Twoja Norwegia; Schweiz; Remote; CHF 120,000 - 190,000; Full time

Job summary

CERN's Office of Data Privacy seeks a Data Privacy Specialist to advise management and stakeholders on data protection issues across the organization. You will report to the Data Privacy Advisor and support governance, risk assessments, data transfers, and incident response throughout the data lifecycle.

The role requires strong data protection expertise, experience in international settings, and the ability to work with independence and impartiality.

Qualifications

• Proven data protection expertise.
• Experience applying data protection rules, preferably EU data protection framework.
• Experience in international environments dealing with EU actors/bodies or IGOs.
• Ability to act with independence and impartiality.
• Certification or admission to the bar is an asset.

Responsibilities

• Provide specialised legal and operational advice to ensure that CERN's processing of personal data complies with applicable data privacy protection requirements.
• Manage or contribute to privacy and data protection projects involving internal and external stakeholders.
• Advise on governance structures, policies, documentation, and stakeholder engagement to support data privacy protection.
• Ensure effective exercise of data subject rights and prompt handling of grievances and complaints.
• Promote a culture of data privacy protection through communication, awareness campaigns, and training.
• Oversee the effectiveness of the data privacy protection framework and align with evolving regulations and best practices.

Skills

EU regulations

data protection

stakeholder management

risk assessment

compliance auditing

document drafting

presentation skills

multilingual English/French

independence & impartiality

Education

Master's degree or equivalent in Law/Data Protection/IT

Certification in data privacy (IAPP/CIPP) or equivalent

Job description

Job description

What you'll do

As a Data Privacy Specialist, you will join the Office of Data Privacy (ODP) in the Office of the CIO. ODP is CERN's independent and impartial centre of expertise in the area of data privacy. You will report to the Data Privacy Advisor, CERN's Data Protection Officer, and will advise CERN Management as well as Data Subjects and External Entities involved in the Processing of Personal Data, on all issues related to the Organization's data privacy protection.

Your responsibilities

• Provide specialised legal and operational advice to ensure that CERN's processing of personal data complies with applicable data privacy protection requirements throughout the data lifecycle, including projects, contracts, risk assessments, data transfers, and data breach response, taking into account data protection implications of emerging technologies.
• Manage or contribute to projects in the privacy and data protection field involving internal and external stakeholders (e.g. international data-sharing initiatives).
• Advise on the relevant governance structures, policies, documentation, stakeholder engagement, and establish and maintain regulatory relationships necessary to support CERN's data privacy protection framework.
• Ensure the effective exercise of data subject rights and the prompt handling of grievances and complaints.
• Promote a strong culture of data privacy protection through communication, awareness campaigns, guidance materials, and targeted training for CERN personnel and stakeholders.
• Oversee the effectiveness of CERN's data privacy protection framework, identify improvement opportunities, and ensure ongoing alignment with evolving regulatory expectations and recognised best practices.

Your profile

• You have proven data protection expertise and experience.
• You have extensive practical experience in data protection acquired at national or international level, in particular practical experience in applying data protection rules (preferably EU data protection framework).
• You preferably have experience working in an international environment and in dealing with EU actors and bodies or Inter-Governmental Organizations (IGOs).
• You will act with the required independence and impartiality.
• Master's degree or equivalent relevant experience in the field of Law, Data Protection, Privacy, IT or a related field. Holding a certification in the domain of data privacy protection (e.g. International Association of Privacy Professionals (IAPP), Certified Information Privacy Professional (CIPP)), or equivalent, or admission to the bar or equivalent legal qualification would be an asset.

Your skills

• Knowledge of EU regulations.
• Knowledge of administrative rules and procedures.
• Drafting and writing of official documents.
• Stakeholder relationship management, in particular data protection commissions, communities of DPOs of other IGOs.
• Risks assessment for compliance and data protection purposes.
• Compliance auditing.
• Delivers presentations in a structured and clear way; adjusts style and content to the audience; responds calmly and confidently to questions.
• Has a structured and organised approach towards work; is able to set priorities and plan tasks with results in mind.
• Is willing to work on different projects simultaneously.
• Maintains confidentiality.
• Spoken and written both English and French.

Eligibility criteria

You are a national of a CERN Member State or Associate Member State. Currently, we cannot consider applications from Pakistani, Lithuanian, Latvian, Cypriot, Croatian and Turkish nationals, as the ceiling defined under Article II.5 of the Associate Membership Agreement has been reached.

You have relevant qualifications and professional experience.

If you have previously held a Staff contract at CERN, you will not be eligible for these positions.

Please pay attention to the additional criteria and requirements for this specific position and mentioned above.

Application documents

• Your CV (English or French)
• Any document you consider relevant to your application

Job location

Switzerland

Job requirements

Skills

manage IT security compliances internal risk management policy establish an ICT security prevention plan manage system security define security policies optimise choice of ICT solution ICT security standards implement ICT risk management ensure information privacy assessment of risks and threats types of storage facilities apply ICT system usage policies ICT problem management techniques information confidentiality develop ICT safety information identify ICT security risks

Employer

Name

CERN