Data Protection Specialist

Boehringer Ingelheim GmbH; Wrocław; On-site; PLN 171,232 - 256,849; Full time

Job summary

A global pharmaceutical company is seeking a Data Protection Specialist for their team in Wrocław. The role involves advising partners on Data Processing Agreements, supporting contract negotiations, and ensuring compliance with data protection standards. Ideal candidates will have 2-4 years of experience in data protection, a degree in law or a related field, and strong communication skills. This position offers growth opportunities in a dynamic environment.

Qualifications

• 2-4 years of experience in the field of data protection.
• Experience in legal shared service structures or in-house legal departments.
• CIPP/E or equivalent data protection certification is a plus.

Responsibilities

• Advise business partners on Data Processing Agreements and related matters.
• Support contract negotiations with internal and external stakeholders.
• Conduct Data Protection monitoring activities for compliance.
• Train colleagues on processes and tools.

Skills

Excellent command of business and legal English

Negotiating Data Processing Agreements

Conducting Transfer Impact Assessments

Project management skills

Education

Degree in law, business administration, or a related field

Tools

OneTrust or similar systems for maintaining ROPA

Job description

Would you like to join an expert Legal & Compliance team within our Global Business Services organization? Are you seeking a new challenge in the Data Protection area in a dynamic Shared Service Center environment? This is an exciting opportunity to help build a strong team of in-house legal experts at our GBS Center in Wrocław. If you are a hard-working individual with excellent communication skills and a growth mindset, our Data Protection Team could be the perfect fit for you!

Tasks & responsibilities

As a Data Protection Specialist, you will:

• Advise business partners across Europe on Data Processing Agreements, EU Standard Contractual Clauses, Transfer Impact Assessment and Technical & Organizational Measures, following defined playbooks, risk parameters, and SLAs;
• Support contract negotiations by collaborating with internal stakeholders and interacting directly with external partners;
• Assist in identifying, documenting, and assessing personal data processing activities for the Record of Processing Activities (ROPA);
• Conduct Data Protection monitoring activities to ensure compliance with global procedures and standards;
• Provide guidance and training on legal systems and tools such as wizard applications, Contract Lifecycle Management systems, and e‑signature solutions;
• Collaborate with internal networks and cross‑functional teams on diverse legal topics;
• Contribute Data Protection expertise to ongoing projects and the creation of new team services;
• Train colleagues on existing and newly introduced processes;
• Perform and oversee quality management routines and drive process improvement efforts;
• Ensure the proper intake and tracking of requests and matters in the designated systems.

About our future employee

You should have Excellent command of business and legal English and a strong willingness to continue learning and between 2 and 4 years' experience in the field of data protection, including reviewing, redlining and negotiating DPAs/EU SCCs, conducting TIAs and maintaining ROPA.

Additionally we are looking for:

• Experience in legal shared service structures, in-house legal departments, or law firms; familiarity with the pharmaceutical industry is a plus;
• A degree in law, business administration, or a related field;
• Strong business partnering and project management skills;
• Ability to manage and prioritize multiple tasks effectively;
• High learning agility and a proactive mindset;
• CIPP/E or equivalent data protection certification (nice to have);
• Knowledge of OneTrust or similar systems for maintaining ROPA (nice to have).