Data Protection Analyst

Richemont Iberia SL; Moscavide; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Richemont Iberia SL in Lisbon is seeking an experienced IT Risk, Compliance and Data Protection professional to act as the central GRC contact for DLP initiatives. You will coordinate across IT, Security, Legal, HR and Data Office to translate regulatory needs into practical controls.

You will own DLP demand intake, contribute to data classification frameworks, and monitor KPIs to ensure effective risk management with a balance between security and usability.

Qualificações

• 5+ years of experience in IT Risk, Compliance, Information Security or Data Protection
• Good understanding of data protection risks, data classification and DLP concepts
• Ability to translate business needs and regulatory requirements into structured, actionable controls
• Proven ability to coordinate across multiple stakeholders in a complex, international environment
• Ability to work independently, prioritize effectively under pressure, and build trusted relationships with diverse teams across the organization
• Strong communication and influencing skills, with the ability to drive alignment across teams
• Structured and pragmatic mindset, with a focus on delivery and measurable outcomes
• Ability to balance security requirements with business usability and operational constraints
• High level of integrity and discretion when dealing with sensitive data and topics
• Fluent in English, other languages are a plus.

Responsabilidades

• Act as the central GRC point of contact for DLP, ensuring coordination across IAM, Digital Workplace, Connectivity and Endpoint
• Drive end-to-end orchestration of DLP initiatives, ensuring alignment across Technology, Security, Legal, HR and Data Office
• Own the DLP demand intake and requirements definition, translating business needs, regulatory constraints and operational workflows into practical controls
• Contribute to the definition and evolution of data classification and protection frameworks, aligned with Group risk appetite and best practices
• Ensure consistency of data classification, labelling and protection requirements across systems and regions
• Coordinate with Technology teams to ensure effective implementation of DLP controls (without owning technical deployment)
• Define and monitor KPIs to track DLP control coverage, effectiveness and risk exposure
• Promote pragmatic, business-aligned controls, balancing data protection with usability and operational needs

Conhecimentos

IT risk

Compliance

Information security

Data protection

DLP

Stakeholder coordination

Communication

Delivery oriented

English fluency

Formação académica

Bachelor's or MSc in Computer Science / Information Systems

Descrição da oferta de emprego

HOW WILL YOU MAKE AN IMPACT?

Your key responsibilities will be the following

• Act as the central GRC point of contact for DLP, ensuring coordination across IAM, Digital Workplace, Connectivity and Endpoint
• Drive end-to-end orchestration of DLP initiatives, ensuring alignment across Technology, Security, Legal, HR and Data Office
• Own the DLP demand intake and requirements definition, translating business needs, regulatory constraints and operational workflows into practical controls
• Contribute to the definition and evolution of data classification and protection frameworks, aligned with Group risk appetite and best practices
• Ensure consistency of data classification, labelling and protection requirements across systems and regions
• Coordinate with Technology teams to ensure effective implementation of DLP controls (without owning technical deployment)
• Define and monitor KPIs to track DLP control coverage, effectiveness and risk exposure
• Promote pragmatic, business-aligned controls, balancing data protection with usability and operational needs

HOW WILL YOU EXPERIENCE SUCESS WITH US?

• Bachelor or MSc in Computer Science, Information System Management, or a related field.
• 5+ years of experience IT Risk, Compliance, Information Security or Data Protection
• Good understanding of data protection risks, data classification and DLP concepts
• Ability to translate business needs and regulatory requirements into structured, actionable controls
• Proven ability to coordinate across multiple stakeholders in a complex, international environment
• Ability to work independently, prioritize effectively under pressure, and build trusted relationships with diverse teams across the organization.
• Strong communication and influencing skills, with the ability to drive alignment across teams
• Structured and pragmatic mindset, with a focus on delivery and measurable outcomes
• Ability to balance security requirements with business usability and operational constraints
• High level of integrity and discretion when dealing with sensitive data and topics
• Fluent in English, other languages are a plus.