Data Protection Associate Analyst

Richemont Iberia SL; Moscavide; On-site; EUR 50,000 - 80,000; Full time

Job summary

Richemont Iberia SL seeks an experienced DLP and IT risk professional to act as the central GRC contact for data protection. You will coordinate across IAM, Digital Workplace, Connectivity and Endpoint to drive end-to-end DLP initiatives and translate business needs into practical controls.

You will define data classification frameworks, monitor KPIs, and balance security with usability while operating in an international environment. Fluent English required; additional languages are a plus.

Qualifications

• Bachelor or MSc in Computer Science, Information System Management, or a related field.
• 5+ years of experience IT Risk, Compliance, Information Security or Data Protection.
• Good understanding of data protection risks, data classification and DLP concepts.
• Ability to translate business needs and regulatory requirements into structured, actionable controls.
• Proven ability to coordinate across multiple stakeholders in a complex, international environment.
• Ability to work independently, prioritize effectively under pressure, and build trusted relationships with diverse teams across the organization.
• Strong communication and influencing skills, with the ability to drive alignment across teams.
• Structured and pragmatic mindset, with a focus on delivery and measurable outcomes.
• Ability to balance security requirements with business usability and operational constraints.
• High level of integrity and discretion when dealing with sensitive data and topics.
• Fluent in English, other languages are a plus.

Responsibilities

• Act as the central GRC point of contact for DLP and coordinate across IAM, Digital Workplace, Connectivity and Endpoint.
• Drive end-to-end orchestration of DLP initiatives across Technology, Security, Legal, HR and Data Office.
• Own the DLP demand intake and translate business needs into practical controls.
• Contribute to the definition and evolution of data classification and protection frameworks, aligned with Group risk appetite and best practices.
• Ensure consistency of data classification, labelling and protection requirements across systems and regions.
• Coordinate with Technology teams to ensure effective implementation of DLP controls (without owning technical deployment).
• Define and monitor KPIs to track DLP control coverage, effectiveness and risk exposure.
• Promote pragmatic, business-aligned controls, balancing data protection with usability and operational needs.

Skills

IT Risk

Compliance

Information Security

Data Protection

DLP concepts

Stakeholder coordination

English communication

Delivery focus

Education

Bachelor or MSc in Computer Science/ Information Systems

Job description

HOW WILL YOU MAKE AN IMPACT?

• Act as the central GRC point of contact for DLP, ensuring coordination across IAM, Digital Workplace, Connectivity and Endpoint
• Drive end-to-end orchestration of DLP initiatives, ensuring alignment across Technology, Security, Legal, HR and Data Office
• Own the DLP demand intake and requirements definition, translating business needs, regulatory constraints and operational workflows into practical controls
• Contribute to the definition and evolution of data classification and protection frameworks, aligned with Group risk appetite and best practices
• Ensure consistency of data classification, labelling and protection requirements across systems and regions
• Coordinate with Technology teams to ensure effective implementation of DLP controls (without owning technical deployment)
• Define and monitor KPIs to track DLP control coverage, effectiveness and risk exposure
• Promote pragmatic, business-aligned controls, balancing data protection with usability and operational needs

HOW WILL YOU EXPERIENCE SUCESS WITH US?

• Bachelor or MSc in Computer Science, Information System Management, or a related field.
• 5+ years of experience IT Risk, Compliance, Information Security or Data Protection
• Good understanding of data protection risks, data classification and DLP concepts
• Ability to translate business needs and regulatory requirements into structured, actionable controls
• Proven ability to coordinate across multiple stakeholders in a complex, international environment
• Ability to work independently, prioritize effectively under pressure, and build trusted relationships with diverse teams across the organization.
• Strong communication and influencing skills, with the ability to drive alignment across teams
• Structured and pragmatic mindset, with a focus on delivery and measurable outcomes
• Ability to balance security requirements with business usability and operational constraints
• High level of integrity and discretion when dealing with sensitive data and topics
• Fluent in English, other languages are a plus.