Security & Data Privacy Engineer (GDPR & AI)

SKF Group; Saint-Cyr-sur-Loire; Hybrid; EUR 65,000 - 100,000; Full time

Job summary

SKF Vertevo invites applications for an Information Security & Data Privacy Engineer to bridge Security, Legal, Procurement, Engineering and Business teams. You will ensure IT/OT/Cloud/Data/AI solutions comply with security and privacy requirements and champion Secure by Design and Privacy by Design principles.

This role is located at one of SKF's major sites, including Saint-Cyr (France), with collaboration across global teams and stakeholders.

Qualifications

• Strong technical cybersecurity background with governance, compliance, architecture, or assurance.
• Expert knowledge of GDPR, personal data processing, PII protection, controller and processor obligations, data sovereignty, and privacy regulations.
• Experience reviewing DPAs, privacy clauses, and data-sharing agreements.
• Knowledge of IAM, DLP, encryption, cloud security, application security, and information protection.
• Familiarity with ISO 27001, ISO 27701, TISAX, NIS2, and other relevant security and privacy frameworks.

Responsibilities

• Translate security, privacy, regulatory, and contractual requirements into practical technical and operational controls.
• Lead security and privacy assessments, including DPIAs, PIAs, risk assessments, and compliance reviews.
• Provide expert guidance on GDPR, PII processing, data retention, data minimisation, lawful processing, data subject rights, and records management.
• Review Data Processing Agreements (DPAs), Controller-to-Processor, Controller-to-Controller agreements, SCCs, and supplier contracts.
• Assess data residency, data sovereignty, cross-border transfer, and third-party processing risks across cloud and SaaS environments.
• Review solution architectures and technology implementations to ensure compliance with security, privacy, and regulatory requirements.
• Validate/audit technical safeguards including IAM, Data Loss Prevention, encryption, logging, monitoring, vulnerability management, and information protection controls.
• Conduct security and privacy due diligence of suppliers, technology partners, data processors, and cloud providers.
• Support internal and external audits, certification activities, customer assessments, and regulatory enquiries.
• Manage compliance gaps, remediation plans, security exceptions, and risk acceptance activities.
• Support AI and data-driven initiatives by assessing data processing, privacy implications, information protection requirements, and compliance obligations.
• Monitor emerging privacy, security, and AI regulations and ensure organisational policies and controls remain aligned.

Skills

Cybersecurity

GDPR

DPAs

IAM

Data governance

Privacy by design

Audits

Stakeholder management

Cloud security

Job description

SKF Vertevo invites applications for an Information Security & Data Privacy Engineer to bridge Security, Legal, Procurement, Engineering and Business teams. You will ensure IT/OT/Cloud/Data/AI solutions comply with security and privacy requirements and champion Secure by Design and Privacy by Design principles.

This role is located at one of SKF's major sites, including Saint-Cyr (France), with collaboration across global teams and stakeholders.