Data Privacy Officer

Jobtailor; Milano; In loco; EUR 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Jobtailor is seeking an experienced Data Privacy lead in Milan to drive global privacy program governance, DSAR management, and DPIA oversight across regions. You will collaborate with IT, Security, HR, and Marketing to implement encryption, data minimization, and robust privacy controls.

The role requires deep GDPR knowledge, strong stakeholder management, and the ability to operate independently in a global setting. Fluency in English is mandatory; Italian or French is a plus.

Competenze

• 7+ years of dedicated data privacy experience.
• At least 3 years in a senior or global role managing complex privacy programs.
• Deep understanding of EU GDPR and UK GDPR.
• Experience with Brazilian LGPD, CCPA/CPRA, or other international privacy laws.
• Proven track record managing complex DSAR requests, including data mapping, redacting, and legal exceptions.
• Ability to work independently, report to top management, and challenge data processing activities without conflict of interest.
• Bachelor’s degree in Law, IT, or a related field.
• IAPP certifications such as CIPP/E, CIPM, CIPT are highly desirable.
• Fluency in English is required.
• Italian or French is a strong advantage.
• Strong strategic thinking, communication, analytical, problem-solving, and stakeholder-management abilities.

Mansioni

• Act as primary liaison for data protection authorities and lead responses to inquiries and investigations.
• Monitor global privacy law changes and implement updates to processing activities.
• Develop and maintain data privacy policies, procedures, and governance frameworks.
• Maintain Records of Processing Activities (RoPA).
• Own end-to-end global DSAR process including access, rectification, erasure, and portability requests.
• Develop scalable processes to identify, locate, and process sensitive data.
• Balance individual rights with third-party confidentiality in complex data requests.
• Oversee DPIAs for high-risk processing, products, and vendor technologies.
• Collaborate with IT and Security to implement encryption and data minimization by design.
• Conduct audits to address compliance vulnerabilities.
• Lead data breach investigations, response, and containment.
• Coordinate regulatory and affected-individual notifications within deadlines.
• Foster a proactive privacy culture through training and awareness programs.
• Provide privacy guidance to HR, Marketing, and Engineering teams.

Conoscenze

Data Privacy

DSAR Management

Regulatory Interpretation

Stakeholder Management

Independence

English Fluency

Formazione

Bachelor’s degree in Law/IT or related field

IAPP Certifications (CIPP/E CIPM CIPT) desirable

Strumenti

Encryption

Privacy Management Software

Data Mapping Tools

Compliance Management Systems

Descrizione del lavoro

• Serve as the primary point of contact for data protection authorities and lead responses to data protection inquiries and investigations


• Monitor global privacy law changes, interpret implications, and implement updates to internal data processing activities


• Develop, implement, and maintain data privacy policies, procedures, and data governance frameworks across operational regions


• Maintain comprehensive Records of Processing Activities (RoPA)


• Own and manage the end-to-end global DSAR process, including access, rectification, erasure, and portability requests


• Develop scalable processes to identify, locate, and process sensitive data across organizational systems


• Evaluate complex data requests while balancing individual rights and third-party confidentiality


• Oversee Data Protection Impact Assessments (DPIAs) for high-risk processing, products, and vendor technologies


• Collaborate with IT and Security teams to implement technical safeguards such as encryption and data minimization by design


• Conduct audits to proactively address compliance vulnerabilities


• Lead investigation and management of data breaches, including response and containment


• Coordinate regulatory and affected-individual notifications within legal timelines


• Foster a proactive data protection culture through employee training and awareness programs


• Provide actionable privacy guidance to HR, Marketing, and Engineering teams

Requirements

• 7+ years of dedicated data privacy experience


• At least 3 years in a senior or global role managing complex privacy programs


• Deep understanding of EU GDPR and UK GDPR


• Experience with Brazilian LGPD, CCPA/CPRA, or other international privacy laws


• Proven track record managing complex DSAR requests, including data mapping, redacting, and legal exceptions


• Ability to work independently, report to top management, and challenge data processing activities without conflict of interest


• Bachelor’s degree in Law, IT, or a related field


• IAPP certifications such as CIPP/E, CIPM, or CIPT are highly desirable


• Fluency in English is required


• Italian or French is a strong advantage


• Strong strategic thinking, communication, analytical, problem-solving, and stakeholder-management abilities

Core Competencies

Demonstrates extensive expertise in data privacy management, including compliance with EU GDPR, UK GDPR, and other international privacy laws. Capable of developing and implementing data privacy policies, managing DSAR processes, and fostering a proactive data protection culture within organizations.

Highest-signal resume keywords

• Data Privacy Management


• EU GDPR Compliance


• DSAR Process Management


• Data Protection Impact Assessments


• IAPP Certification

ATS Optimization Keywords

Hard Skills

• Data Mapping


• Data Governance Frameworks


• Records of Processing Activities


• Data Breach Management


• Privacy Policy Development


• Technical Safeguards Implementation


• Compliance Audits


• Data Processing Activities Evaluation


• Sensitive Data Processing


• Privacy Law Interpretation

Soft Skills

• Strategic Thinking


• Communication


• Analytical Problem-Solving


• Stakeholder Management


• Independence

Certifications & Qualifications

• CIPP/E


• CIPM


• CIPT

Industry Keywords

• Data Protection Authorities


• Global Privacy Laws


• Data Processing Activities


• Employee Training Programs


• Regulatory Notifications

Tools & Technologies

• Encryption


• Data Minimization Tools


• Compliance Management Systems


• Privacy Management Software