Data Privacy & GRC Specialist

Link Group; Poland; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

Link Group is seeking a senior privacy professional to align IT and cloud operations with EU privacy requirements. You will conduct DPIAs, maintain RoPAs, and review data flows and access controls, working with SOC teams and network architects.

The role requires extensive privacy documentation experience and strong analytical problem-solving skills. You will provide expert guidance on DPAs and TIAs, manage third-party data transfers, and act as the main liaison for data privacy inquiries and

Qualifications

• Active certifications in Audit & Security: CISA, CISM, GSNA, GCCC, CISSP-ISSMP, GIAC Certified ISO-27000 Specialist
• 5+ years in Data Protection in high-tech environments
• 3+ years in Privacy Documentation: RoPAs, DPIAs, and DPAs
• 2+ years in Technical Auditing: privileged access, data transfers, hosting architectures, subcontractor data flows
• Analytical problem-solver with ability to handle incomplete IT information and identify compliance gaps

Responsibilities

• Align complex IT and cloud operations with European data privacy standards, laws, and regulations.
• Conduct and review comprehensive DPIAs and maintain Records of Processing Activities.
• Analyze data flows, verify access logs, review SIEM exports, and audit data retention schemes.
• Counsel on DPAs, TIAs, and third-party vendor management.
• Serve as primary contact for data privacy inquiries, complaints, and audits.
• Design and deliver privacy awareness training to staff to foster a security culture.

Job description

Link Group is seeking a senior privacy professional to align IT and cloud operations with EU privacy requirements. You will conduct DPIAs, maintain RoPAs, and review data flows and access controls, working with SOC teams and network architects.

The role requires extensive privacy documentation experience and strong analytical problem-solving skills. You will provide expert guidance on DPAs and TIAs, manage third-party data transfers, and act as the main liaison for data privacy inquiries and