GDPR & Compliance

OMODA & JAECOO España; Alcobendas; Presencial; EUR 52.000 - 68.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Descripción de la vacante

OMODA Motors Spain, S.L.U. seeks a GDPR and Compliance professional to join the Legal Department in Alcobendas. The role reports to the Head of Legal and dotted lines to Europe and China HQ.

You will oversee GDPR compliance, data protection policies, DPIAs, and training across the organization. The ideal candidate holds a Law degree with a Master in Legal Practice, 3–5 years in data protection, and fluent Spanish/English.

Formación

• Bachelor's degree in Law and a Master's in Legal Practice or equivalent.
• 3–5 years of experience in data protection and compliance.
• Strong knowledge of GDPR and EU/Spanish data protection rules.
• Experience implementing, monitoring, or auditing compliance programs.
• Ability to interpret regulations and translate them into business processes.

Responsabilidades

• Monitor and ensure GDPR compliance and data protection regulations.
• Support implementation and continuous improvement of the Compliance Program.
• Provide guidance to business units on processing personal data and new technologies.
• Draft and update data protection docs (RoPA, DPAs, third-party agreements, policies).
• Conduct DPIAs and risk assessments with proposed mitigations.
• Review supplier data protection and security measures.
• Manage security breaches and risk controls.
• Coordinate data subject requests and investigations.
• Deliver GDPR and Compliance training to employees.
• Collaborate with global teams in China and Europe on standards.
• Support audits and maintain documentation for GDPR/compliance.

Conocimientos

GDPR knowledge

Data protection

Compliance programs

Stakeholder management

Spanish

English

Educación

Bachelor's Degree in Law

Master's Degree in Legal Practice

Descripción del empleo

OMODA Motors is a new brand built by Chery Group, which is a leading Chinese automobile company. OMODA operates individually from other brands of Chery Group. Its business scope covers the R&D, production and sales of passenger cars.

Mission

The position will be a GDPR & Compliance role and will form part of the Legal Department of Omoda Motors Spain, S.L.U., reporting directly to the Head of Legal. The role will also maintain a reporting line to the European Headquarters and an additional functional reporting line to the China Headquarters.

Key Responsibilities

• Monitor and ensure compliance with GDPR, local data protection regulations, and internal company policies.
• Support the implementation, maintenance, and continuous improvement of the Company's Compliance Program.
• Provide ongoing guidance to business units in the development of their initiatives and day-to-day activities involving the processing of personal data and new technologies.
• Draft, manage and update data protection documentation, including Records of Processing Activities (RoPA), Data Processing Agreements (DPAs), agreements with third parties, legal reports, policies, guidelines, privacy notices, DISCLAIMERS and procedures.
• Conduct compliance risk assessments, data protection risk assessments and Data Protection Impact Assessments (DPIAs), proposing appropriate mitigation measures where necessary.
• Review data protection and compliance aspects of new suppliers, including the assessment of technical and organisational security measures.
• Management of security breaches and risks, and implementation of controls.
• Coordinate responses to data subject requests and support investigations related to privacy matters.
• Deliver GDPR and Compliance training sessions to employees and promote awareness across the organization.
• Collaboration with the global legal/compliance team in China and Europe on the implementation of GDPR and Compliance standards.
• Manage and support internal and external audits, ensuring GDPR and Compliance requirements are properly documented and maintained.

Requirements

• Bachelor's Degree in Law and Master's Degree in Legal Practice.
• Between 3-5 years of experience in Data Protection and Compliance.
• Strong knowledge of GDPR and Spanish/EU data protection regulations.
• Experience developing, implementing, or monitoring data protection and compliance programs.
• Familiarity with compliance risk assessments, audits, and internal control frameworks.
• Experience technical and organisational security measures under the GDPR, IT systems or digital projects will be highly valued.
• Ability to interpret regulations and translate them into practical business processes.
• Strong analytical, organizational, and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Fluent in Spanish and English.

Equal Opportunity Statement

We are committed to fostering a diverse and inclusive workplace where everyone feels valued, respected, and empowered to contribute to their fullest potential.

We inform you that OMODA MOTORS SPAIN S.L.U, a company with its registered office in Modulo 1 de la planta baja, Avda. Brusuelas 36, 28108, Alcobendas, Madrid, with CIF B56485493 (hereinafter referred to as the "Company"), will process your personal data on the basis of your express consent for the purposes of managing your job application. Your personal data will be transferred to Chery Automobile Co. Ltd (parent company of the Group), a company based in China, in order to carry out the process you have voluntarily requested. As stated in the European Data Protection Regulation (GDPR), we inform you that the Personal Information Protection Law of the People's Republic of China (PIPL) may conflict with the GDPR and in some scenarios. Your personal data will be kept for 2 years and then delete. Additionally, you may exercise your data protection rights (access, rectification, opposition, cancellation, etc.) by sending an e-mail to [e-mail] indicating the right you wish to exercise and your identification details. If you consider that we have not handled your personal data appropriately, you may contact the Data Protection Officer at [e-mail]. However, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that there has been a breach of data protection legislation with regard to the processing of your personal data.