GDPR & Compliance

OMODA & JAECOO España; Alcobendas; On-site; EUR 55,000 - 85,000; Full time

Job summary

OMODA MOTORS SPAIN S.L.U. is seeking a GDPR & Compliance professional to join the Legal Department in Madrid. The role reports to the Head of Legal and collaborates with European and China headquarters to implement GDPR standards.

Responsibilities include monitoring data protection, developing the compliance program, guiding business units, drafting DPAs and RoPA, conducting DPIAs, and training staff on privacy and data security. Fluency in Spanish and English required.

Qualifications

• Bachelor's Degree in Law and Master's Degree in Legal Practice required.
• 3–5 years of experience in Data Protection and Compliance.
• Strong knowledge of GDPR and EU data protection regulations.

Responsibilities

• Monitor GDPR compliance and local data protection regulations.
• Support implementation and improvement of the Compliance Program.
• Provide guidance to business units on data processing and new technologies.
• Draft and maintain records (RoPA, DPAs, policies, notices).
• Conduct DPIAs and risk assessments with mitigations.
• Review supplier data protection and security measures.
• Manage security breaches and risk controls.
• Coordinate responses to data subject requests.
• Deliver GDPR and Compliance training to employees.
• Collaborate with global teams in Europe and China on standards.
• Support internal and external audits.

Skills

GDPR knowledge

Compliance program

Data protection

Risk assessment

Audits

Training delivery

Stakeholder management

Bilingual Spanish-English

Education

Law degree

Masters in Legal Practice

Job description

Mission

The position will be a GDPR & Compliance role and will form part of the Legal Department of Omoda Motors Spain, S.L.U., reporting directly to the Head of Legal. The role will also maintain a reporting line to the European Headquarters and an additional functional reporting line to the China Headquarters.

Key Responsibilities

• Monitor and ensure compliance with GDPR, local data protection regulations, and internal company policies.
• Support the implementation, maintenance, and continuous improvement of the Company's Compliance Program.
• Provide ongoing guidance to business units in the development of their initiatives and day-to-day activities involving the processing of personal data and new technologies.
• Draft, manage and update data protection documentation, including Records of Processing Activities (RoPA), Data Processing Agreements (DPAs), agreements with third parties, legal reports, policies, guidelines, privacy notices, DISCLAIMERS and procedures.
• Conduct compliance risk assessments, data protection risk assessments and Data Protection Impact Assessments (DPIAs), proposing appropriate mitigation measures where necessary.
• Review data protection and compliance aspects of new suppliers, including the assessment of technical and organisational security measures.
• Management of security breaches and risks, and implementation of controls.
• Coordinate responses to data subject requests and support investigations related to privacy matters.
• Deliver GDPR and Compliance training sessions to employees and promote awareness across the organization.
• Collaboration with the global legal/compliance team in China and Europe on the implementation of GDPR and Compliance standards.
• Manage and support internal and external audits, ensuring GDPR and Compliance requirements are properly documented and maintained.

Requirements

• Bachelor's Degree in Law and Master's Degree in Legal Practice.
• Between 3-5 years of experience in Data Protection and Compliance.
• Strong knowledge of GDPR and Spanish/EU data protection regulations.
• Experience developing, implementing, or monitoring data protection and compliance programs.
• Familiarity with compliance risk assessments, audits, and internal control frameworks.
• Experience technical and organisational security measures under the GDPR, IT systems or digital projects will be highly valued.
• Ability to interpret regulations and translate them into practical business processes.
• Strong analytical, organizational, and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Fluent in Spanish and English.

Equal Opportunity Statement

We are committed to fostering a diverse and inclusive workplace where everyone feels valued, respected, and empowered to contribute to their fullest potential.

We inform you that OMODA MOTORS SPAIN S.L.U, a company with its registered office in Modulo 1 de la planta baja, Avda. Brusuelas 36, 28108, Alcobendas, Madrid, with CIF B56485493 (hereinafter referred to as the "Company"), will process your personal data on the basis of your express consent for the purposes of managing your job application. Your personal data will be transferred to Chery Automobile Co. Ltd (parent company of the Group), a company based in China, in order to carry out the process you have voluntarily requested. As stated in the European Data Protection Regulation (GDPR), we inform you that the Personal Information Protection Law of the People's Republic of China (PIPL) may conflict with the GDPR and in some scenarios. Your personal data will be kept for 2 years and then delete. Additionally, you may exercise your data protection rights (access, rectification, opposition, cancellation, etc.) by sending an e-mail to [e-mail] indicating the right you wish to exercise and your identification details. If you consider that we have not handled your personal data appropriately, you may contact the Data Protection Officer at [e-mail]. However, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that there has been a breach of data protection legislation with regard to the processing of your personal data.