Data Protection Specialist

TEAMSYSTEM; Lombardia; Hybrid; EUR 42,000 - 49,000; Full time

Benefits offered by this job

4-day week

Wellbeing budget

Hybrid model

Professional growth

International group

Job summary

TeamSystem is seeking a Data Protection Specialist to safeguard personal data across millions of users, bridging law, technology and product development. You will embed privacy by design, perform DPIAs, update processing records, and guide product teams on privacy implications for new initiatives.

The role requires GDPR expertise, strong analytical skills, and experience negotiating DPAs/SCCs, with English proficiency and professional certifications (IAPP) a plus.

Qualifications

• Experience managing data protection at ICT/software firms or top privacy consultancies.
• Proficient in GDPR and EU privacy regulations; able to research external regimes for international projects.
• Proven ability to translate regulatory requirements into actionable business guidance.
• Strong analytical, quantitative, and problem-solving skills.
• Excellent stakeholder communication with business, IT and legal teams.

Responsibilities

• Manage and update processing records and Data Protection Impact Assessments (DPIAs).
• Embed privacy by design and by default across products and services.
• Guide product, technology, and business teams on privacy implications of new initiatives.
• Review and negotiate DPAs and SCCs with clients, suppliers and partners.
• Coordinate with DPO and compliance functions for integrated privacy governance.
• Support data breach handling and data subject requests.

Skills

Records of Processing

DPIAs

Privacy by design

DPAs & SCCs negotiation

NIS2 & AI Act

Education

Law degree

Economics degree

Tools

GRC tools

Job description

We are the leading Tech Company in Europe , supporting digital innovation for over 45 years. We are committed to bringing digital technology into every business . How? By putting customers first and becoming the go-to partner for professionals, small, medium and large companies, offering customised solutions and services to optimise business processes, from HR and customer relations to e-invoicing and digital payments.

The Legal and Corporate Affairs team ensures compliance with regulations at the group level, manages disputes with customers and business counterparties, defines and negotiates contracts, and provides legal support for activities related to partnerships, commercial agreements, and extraordinary transactions. We also play a crucial role in Mergers and Acquisitions (M&A), providing legal advice and support at all stages of the process.

You'll join as Data Protection Specialist at the intersection of law, technology, and product - protecting the personal data of millions of people who use TeamSystem's solutions every day, and guiding the Group through a regulatory landscape that is expanding as fast as digital innovation itself.

In particular, you will:

• Manage and update the Group's records of processing activities , conduct Data Protection Impact Assessments , and embed privacy by design and by default principles into the development of products and services
• Provide guidance to product, technology, and business teams on the privacy implications of new projects and processing initiatives, turning legal requirements into clear and actionable operational guidance
• Review and negotiate privacy-related contracts with clients, suppliers, and partners - including data processing agreements and standard contractual clauses - and handle contractual matters related to NIS2 and the AI Act
• Track developments in data protection law and case law, prepare analyses and updates for internal teams, and coordinate with the Group DPO and compliance functions to ensure the integrated management of obligations across privacy, security, and AI governance
• Support the handling of personal data breaches , data subject requests , and relations with the Data Protection Authority

What skills are we looking for?

• At least 3 years of experience managing data protection matters at structured ICT/software companies or leading legal/privacy consulting firms, with proven experience in records of processing activities , DPIAs , privacy by design documentation (also using GRC tools ), reviewing/negotiating DPAs and SCCs , and managing contractual matters related to NIS2 and the AI Act
• In-depth knowledge of GDPR , national/EU regulations, Garante / EDPB guidelines, and the ability to research privacy regulations outside the EU in support of international projects
• Excellent analytical , quantitative , and problem-solving skills
• Professional working proficiency in English (B2/C1)
• Degree in Law, Economics , or related fields
• IAPP certifications (CIPP/E, CIPM) a plus
• Strong motivation, drive for innovation and continuous learning
• Excellent relational and communication skills with stakeholders at all levels (business, IT, legal, suppliers), stress management , and results orientation across multiple concurrent projects/deadlines
• Proactive approach to translating regulatory requirements into clear guidance for the business, and adaptability to dynamic, technologically advanced environments
• Passion for ICT , AI , and digital transformation , with professional use of AI tools

What we offer?

We believe our relationship with our people is built on trust, clear goals and full autonomy in how to reach them. With AI at our side, we spend more time on the work that creates real value: thinking, creating, innovating and making decisions. Here, work is measured by the quality of each contribution, the results achieved and the ownership everyone takes. It's this vision, built over time, that made our 4-day week a natural next step: one extra day every week for what matters to you.

• Total compensation: € 42.000 - € 49.000 Including a variable component linked to performance. Full-time reference.
• Wellbeing Digital Wallet: from € 2.800 per year . A personal budget to support your wellbeing: travel, medical expenses, parental support, sports, and reimbursements for personal services such as childcare, caregiving, and more.
• Flexibility: we work in a hybrid model, with autonomy over when to come into the office. For us, being on-site makes sense when it improves the way we work: you come in when collaboration with colleagues makes a difference, not for presence, but for effectiveness.
• Growth: we offer tailored learning paths and concrete development opportunities within a continuously evolving international group.