Remote Senior GRC Expert - Data Privacy & Compliance Leader

Quality & Reliability S.A. (QnR); Województwo mazowieckie; Remote; PLN 150,000 - 210,000; Full time

Benefits offered by this job

Remote work

Job summary

Quality & Reliability (QnR) is seeking a Senior Governance Risk and Compliance Expert to join our team supporting a public sector client in Warsaw, Poland, with remote work. You will ensure IT operations align with EU data protection legislation, conduct DPIAs, and maintain RoPAs while advising stakeholders on obligations across the organization.

You’ll develop policies, deliver training, and collaborate with authorities, SOC, and architecture teams to strengthen data protection across processes

Qualifications

• 5+ years in IT, 4+ years in a GRC role
• Hands-on data protection compliance experience in ICT or public sector
• Strong knowledge of EU data protection laws and privacy standards

Responsibilities

• Ensure IT operations comply with data privacy laws and standards
• Conduct privacy impact assessments (DPIAs) and maintain RoPAs
• Identify compliance gaps and propose practical countermeasures
• Advise on data protection and personal data processing issues
• Develop and communicate data privacy policies and procedures
• Deliver staff training to foster a data protection culture
• Serve as contact for data processing queries and complaints
• Cooperate with authorities and professional groups on data protection
• Manage legal aspects of information security and third-party relations

Skills

GRC

Privacy by design

DPIA

Education

Master’s degree in CS/Engineering/related field

Job description

Quality & Reliability (QnR) is seeking a Senior Governance Risk and Compliance Expert to join our team supporting a public sector client in Warsaw, Poland, with remote work. You will ensure IT operations align with EU data protection legislation, conduct DPIAs, and maintain RoPAs while advising stakeholders on obligations across the organization.

You’ll develop policies, deliver training, and collaborate with authorities, SOC, and architecture teams to strengthen data protection across processes