Data Privacy Counsel

ISS Tech Team; Województwo mazowieckie; On-site; PLN 180,000 - 240,000; Full time

Job summary

ISS, a global facilities services leader, seeks a Data Privacy Counsel in Warsaw to provide pragmatic privacy advice across ISS and embed privacy by design in digital initiatives, recruitment, analytics and AI-enabled solutions. You will work with stakeholders across functions and countries to ensure compliant products and services, while supporting privacy governance.

You will join Group Privacy & Legal Compliance to shape policies, perform DPIAs and risk assessments, and assist audits and

Qualifications

• Law degree with 3–5 years of data protection and privacy experience in an international environment.
• Practical experience with privacy risk assessments, including DPAs and DPIAs.
• Experience managing privacy compliance projects and processes balancing legal requirements with business needs.
• Good understanding of AI, technology, and how privacy requirements apply to business processes.

Responsibilities

• Advise on operational and strategic privacy matters; translate legal requirements into practical solutions.
• Lead DPIAs, TIAs, LIAs and other risk assessments; provide privacy-by-design guidance throughout projects.
• Review and negotiate data protection terms; support audits and due diligence.
• Assess new systems and processes (recruitment analytics, AI-enabled solutions) and support tech transformations.
• Assist incident assessment and remediation; maintain privacy governance and documentation.
• Contribute to Group standards, guidance, and training on privacy and compliance.

Skills

Privacy law

DPIA/DPA

English proficiency

Education

Law degree

Job description

As a global leader in facilities services we connect people and places to make the world work better. Whether directly or indirectly, you’ll play a vital role in supporting our placemakers in delivering exceptional workplace experiences for our customers. Together, we make space for people and businesses to thrive.

Location: Warsaw, Poland

Language: English

Main Purpose Of The Position

As Data Privacy Counsel, you will provide pragmatic, business-focused data protection and privacy advice across ISS and help embed privacy by design in strategic and operational initiatives. You will support Group initiatives such as digital recruitment and onboarding, people analytics, cloud transfer and AI enabled solutions, while also advising on customer and supplier contracts and audits, privacy risk assessments, and personal data incidents. Working independently and closely with stakeholders across functions and countries, you will help deliver products and services responsibly and on time, while supporting consistent privacy compliance across the organisation.

As Data Privacy Counsel, you will play a key role in the Group Data Privacy and Legal Compliance team within Group Legal. The team embeds responsible business conduct and legal compliance across the organisation through global policies, standards and guidelines covering corporate governance, ethical business practices, data privacy and responsible AI use.

What You’ll Do

• Advise business stakeholders on operational and strategic privacy matters, translating legal requirements into workable solutions.
• Conduct and support DPIAs, TIAs, LIAs and other privacy risk assessments, including privacy-by-design advice throughout the project lifecycle.
• Review and negotiate customer, supplier and intra-group data protection terms and support privacy-related audits and due diligence.
• Assess new systems, tools and business processes, including digital recruitment, people analytics, AI-enabled solutions and wider technology transformation initiatives.
• Support personal data incident assessment, remediation and related regulatory matters.
• Maintain privacy documentation and governance processes and contribute to Group standards, guidance, awareness and training.

Who You’ll Work With

• You will be part of Group Privacy & Legal Compliance and work closely with colleagues across Group Legal, Group P&C and Group Technology, as well as country privacy teams and stakeholders responsible for strategic Group programmes.

Key Qualifications

• A law degree or equivalent legal qualification, with solid experience (3-5 years) in data protection and privacy law in an international environment.
• Practical experience with privacy risk assessments, including DPAs, DPIAs and international data transfer assessments.
• Experienced in managing privacy compliance project and processes, balancing legal requirements with practical business needs.
• Good understanding of technology, AI and digital solutions, and the ability to apply privacy requirements to business processes and transformation programmes.
• Fluent written and spoken English; a relevant privacy certification such as CIPP/E or CIPM is an advantage.

Personal Skills You Excel

• Pragmatic and commercially minded, with sound judgement and the ability to balance legal risk with business needs.
• Proactive, structured and accountable, able to work independently and take matters through to completion.
• Strong communicator and relationship builder who collaborates effectively across functions, countries and seniority levels.
• Curious, ambitious and solution-oriented, with a continuous learning mindset, who thrives in a dynamic environment.

Why ISS

At ISS, we are more than just a service provider of cleaning, food, workplace and technical services, we are a partner in our customers’ success. By creating exceptional service moments and transforming workplaces into spaces where employees feel valued, engaged and productive, we enhance productivity and help our customers to attract talent and grow their businesses. This begins with our own people through training, career development, and a supportive culture – empowering them to deliver outstanding service. We know that when our people thrive, they create spaces where our customers’ employees and businesses thrive too.

ISS is a Place to Be You.

Be who you are. Become what you want. Be part of something bigger.

Become more.

Become ISS.

ISS seeks to BE a place of belonging and CREATE places where every person is welcomed, embraced, and valued for exactly who they are. Places where people feel safe, respected, represented, and supported as their authentic selves.