Data Governance Lead

LanceSoft Europe; Warszawa; On-site; PLN 180,000 - 300,000; Full time

Job summary

LanceSoft Europe is seeking a Global HR Data Governance Lead to own the DSAR program globally, covering Associates, Former Associates, Candidates, and Contractors. You will oversee processing, verification, redaction, and secure responses within deadlines, while coordinating with Legal, Privacy, HR, IT, and other stakeholders.

The role requires strong GDPR knowledge, DSAR experience, and hands-on use of privacy platforms.

Qualifications

• Strong knowledge of GDPR and global data protection regulations.
• Hands-on experience managing DSARs or data-subject-rights processes.
• Hands-on experience with OneTrust Privacy Rights Automation or equivalent privacy rights platform.
• Experience handling HR/employee, candidate, contractor, or other personal data.
• Ability to manage multiple requests within a 30-day deadline.

Responsibilities

• Own the end-to-end DSAR process from receipt through final response and closure.
• Triage requests, verify identity, assess scope, and check retention requirements.
• Gather relevant data from HR systems, business assets, individuals, and e-Discovery teams.
• Review data and determine what can be disclosed, including redaction.
• Prepare and issue secure DSAR responses within the 30-day deadline.
• Process and track data deletion requests and confirm completion.
• Manage DSAR workflows, webforms, and response templates in OneTrust.
• Provide privacy guidance to HR/P&O and Associate Relations teams.
• Coordinate with Legal, Privacy, HR, IT, and system owners.
• Maintain confidentiality and compliance with GDPR and information security policies.

Skills

GDPR knowledge

DSARs experience

OneTrust

HR data handling

Data privacy basics

Tools

OneTrust Privacy Rights Automation

Job description

Role: The Global HR Data Governance Lead

Duration: 12 months

Required:

• Strong working knowledge of GDPR and comparable global data protection regulations.
• Proven experience managing Data Subject Access Requests (DSARs) or similar data-subject-rights processes.
• Hands-on experience with OneTrust Privacy Rights Automation or an equivalent privacy rights management platform.
• Experience handling sensitive HR / People & Organization (P&O) personal data.
• Strong understanding of data privacy, data retention, disclosure, redaction, and secure data handling requirements.

Description:

The Global HR Data Governance Lead – Data Privacy is responsible for the global ownership and management of the People & Organization (P&O) Data Subject Access Request (DSAR) process.

The role manages the end-to-end lifecycle of DSARs for Associates, Former Associates, Candidates, and Contractors, ensuring requests are accurately assessed, processed, reviewed, redacted, and responded to within applicable statutory deadlines.

Key responsibilities:

• Own the end-to-end DSAR process, from request receipt through final response and closure.
• Triage requests, verify identity, assess scope, and check applicable data retention requirements.
• Gather relevant personal data from HR systems, business assets, individuals, and e-Discovery teams.
• Conduct reviews and determine what information can be disclosed, including appropriate data redaction.
• Prepare and issue secure DSAR responses within the required 30-day statutory deadline.
• Process and track data deletion requests and confirm completion.
• Manage OneTrust Privacy Rights Automation, DSAR workflows, webforms, and response templates.
• Provide privacy and DSAR guidance to HR/P&O and Associate Relations teams.
• Coordinate with Legal, Privacy, HR, IT, Occupational Health, Forensics, and system owners.
• Maintain strict confidentiality and compliance with GDPR, Privacy, and Information Security policies.

Key requirements:

• Strong knowledge of GDPR and global data protection regulations.
• Hands-on experience with DSAR / Data Subject Rights processes.
• Experience with OneTrust Privacy Rights Automation or similar privacy platforms.
• Experience handling HR/employee, candidate, contractor, or other personal data.
• Strong understanding of data retention, redaction, disclosure, and privacy compliance.
• Ability to manage multiple requests within strict 30-day statutory deadlines.
• Strong stakeholder management across HR, Legal, Privacy, IT, and other business teams.
• Excellent attention to detail, judgment, discretion, and confidentiality.
• Experience with privacy case management, workflows, webforms, and process documentation is preferred.