Senior GRC Expert: Data Privacy & Compliance (Remote)

QNR Group; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

QnR Group in Warsaw, Poland, seeks a Senior Governance, Risk and Compliance Expert to join a public sector client. You will ensure IT operations align with EU data protection laws, conduct DPIAs and RoPAs, and advise stakeholders on obligations, while working remotely from Poland.

You will lead data privacy policy development, deliver awareness training, and collaborate with authorities and cross-functional teams on information security and third-party governance.

Qualifications

• 5+ years IT experience and 4+ years in a GRC role
• Master’s degree in Computer Science, Engineering or related field
• Hands-on data protection compliance in ICT/public sector
• Experience with RoPAs, DPIAs, DPAs, and data mapping
• Knowledge of EU data protection laws and standards

Responsibilities

• Ensure IT operations comply with data privacy laws, regulations and standards
• Conduct privacy impact assessments (DPIAs) and maintain RoPAs
• Identify compliance gaps and propose practical countermeasures
• Advise on data protection matters across the organisation
• Develop and communicate data privacy policies and procedures
• Deliver staff awareness training on data protection
• Act as the contact for queries and complaints related to data processing
• Cooperate with authorities and professional groups on data protection matters
• Manage legal aspects of information security and third-party relations

Skills

GRC experience

Data privacy

Policy development

Training delivery

Communication

Education

Master’s degree in Computer Science/Engineering

Tools

SIEM

Job description

QnR Group in Warsaw, Poland, seeks a Senior Governance, Risk and Compliance Expert to join a public sector client. You will ensure IT operations align with EU data protection laws, conduct DPIAs and RoPAs, and advise stakeholders on obligations, while working remotely from Poland.

You will lead data privacy policy development, deliver awareness training, and collaborate with authorities and cross-functional teams on information security and third-party governance.