Data Protection Officer (DPO) for RETN Group

RETN; Warszawa; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Health insurance

Training and professional development

Opportunities to exchange experience

Job summary

RETN Group is seeking an experienced Data Protection Officer (DPO) to lead the company’s privacy framework across its international telecommunications operations. Headquartered in London, RETN processes personal, customer and employee data across multiple jurisdictions, requiring a strong GDPR and global privacy acumen.

The DPO will provide independent advice to management, oversee DPIAs, data subject rights, DPAs, and regulatory responses, and promote a risk-based approach to compliant data

Qualifications

• 7+ years of professional experience in data protection, privacy, risk or a related field.
• Strong practical knowledge of GDPR.
• Experience working in a multinational organization with operations across multiple jurisdictions.
• Experience with DPIAs, data subject rights, data processing agreements, international transfers and privacy incident management.

Responsibilities

• Lead and continuously develop the company’s global data protection framework, ensuring GDPR compliance across operations.
• Provide privacy guidance on telecommunications products, services and technologies and data handling.
• Oversee international transfers of personal data and ensure third-party compliance; coordinate regulatory responses.

Skills

GDPR

Regulatory compliance

Data protection

Risk management

Cross-functional collaboration

Education

University degree in Law or related discipline

Job description

Data Protection Officer (DPO) for RETN Group

RETN is seeking an experienced Data Protection Officer (DPO) to lead and oversee the company's data protection and privacy framework across its international telecommunications operations.

Headquartered in London and operating across multiple jurisdictions, the company processes significant volumes of personal, customer, employee, communications and operational data across a complex and highly regulated international environment.

The DPO will provide independent and expert advice to the business, monitor compliance with applicable data protection and privacy laws, and support the development of a consistent, risk-based global privacy framework.

The role requires a strong understanding of GDPR together with practical knowledge of international privacy regulations and the ability to translate regulatory requirements into commercially practical solutions.

Key Responsibilities

1. Global Data Protection Governance & Compliance

• Lead and continuously develop the company’s global data protection framework, ensuring compliance with GDPR across all operations.
• Monitor regulatory developments and assess their impact on the business.
• Provide independent, practical and risk-based data protection advice to management and business functions.
• Oversee Data Protection Impact Assessments (DPIAs) and monitor implementation of required changes.
• Advise on data protection risks related to new technologies, including AI, analytics and data-driven initiatives.

3. Telecommunications & Customer Data Protection

• Provide privacy advice on telecommunications products, services and technologies, including the collection, use, retention and disclosure of customer data.
• Advise on data protection considerations relating to communications, traffic, usage and location data.
• Work with relevant company teams to identify and address data protection risks at an early stage.

4. International Data Transfers & Third Parties

• Oversee the company’s approach to international transfers of personal data and advise on appropriate safeguards and transfer mechanisms.
• Ensure third parties and suppliers meet data protection requirements.
• Provide data protection and regulatory advice during personal data breaches and incidents.
• Advise on regulatory and individual notification requirements and support post-incident reviews and improvements.
• Act as the primary point of contact for relevant data protection authorities.
• Coordinate responses to regulatory inquiries, consultations and investigations.
• Develop and deliver GDPR compliance training and awareness program.
• Promote a strong culture of responsible and compliant use of personal data across the organization.
• Maintain oversight of key data protection risks, remediation activities and compliance reporting.
• Report significant data protection risks and compliance matters to senior management and relevant governance bodies.

Requirements

• University degree in Law, Data Protection, Compliance, Risk Management, Information Security, Business Administration or a related discipline.
• Professional qualification such as CIPP, CIPM, CIPT, FIP or equivalent is highly desirable.
• Additional qualifications in cybersecurity, information security, risk or compliance are advantageous.
• 7+ years of relevant professional experience in data protection, privacy, legal, compliance, risk or a related field.
• Strong practical knowledge of GDPR.
• Experience working in a multinational organization with operations across multiple jurisdictions.
• Strong practical experience with DPIAs, data subject rights, data processing agreements, international transfers and privacy incident management.
• Experience working with technology, information security, data analytics or digital products.
• Experience in telecommunications, technology, digital services or another highly regulated/data-intensive industry is strongly preferred.
• Experience interacting with data protection authorities or supporting regulatory investigations is an advantage.

We Offer

• Employment in a large international company;
• A professional team and friendly working environment;
• Health insurance;
• Training and professional development opportunities;
• Opportunities to exchange experience with colleagues from other countries.