DPO EXTERNALISE-REMOTE 2

Keoni; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

Keoni seeks a Data Protection Officer to lead compliance for processing activities and act as the main CNIL liaison. The role requires a certified DPO with initiative to improve data protection across municipal services.

You will prepare documentation, reports, and annual disclosures, coordinating with departments and external authorities. Responsibilities include training delivery, maintaining records of processing activities, and ensuring deadlines are met.

Qualifications

• Certified DPO with relevant certification attached to CV.
• Proactive approach to improving data protection practices.
• Ability to provide documentation and demonstrate regulatory compliance.
• Experience coordinating with municipal services and CNIL is a plus.

Responsibilities

• Assess difficulties and define SMART improvement actions.
• Plan and deliver awareness-raising and training for municipal services.
• Act as primary CNIL contact and manage deadlines.
• Maintain the record of processing activities.
• Prepare annual activity report within two months after financial year.

Skills

Regulatory compliance

Stakeholder coordination

Training delivery

Documentation

Education

Certified DPO

Tools

Microsoft Excel

Job description

CONTEXT The processing of personal data is a fundamental component of most of a local authority's activities. The DPO must act as a \"conductor,\" a leader, for the various departments of the local authority (in particular those that process sensitive data), advising them on their obligations under regulations, especially those stemming from the GDPR, and ensuring compliance.The Data Protection Officer (DPO) must be proactive and take initiative to contribute to the continuous improvement of the organization's practices in the area of personal data protection. The DPO will provide the necessary documentation to demonstrate compliance with all their obligations. They must report on all activities and respond to all client inquiries, providing relevant supporting evidence.MISSIONS – Assessment of difficulties and definition of improvement actions: From the outset of the mission, the DPO must conduct an assessment of the difficulties and define possible improvement actions (using the SMART method: specific, measurable, achievable, relevant, and time-bound objectives). This work must be carried out throughout the execution of the mission, using monitoring tools such as Excel spreadsheets. These elements must be available to the contracting authority upon request.– Awareness-raising and training activities for municipal services: The DPO will define and plan, in consultation with the client, an awareness-raising and training strategy for municipal services. As part of this strategy, they will conduct a one-day training session once a year for jointly identified services.– Role as the primary point of contact for the CNIL: The DPO will be the primary point of contact for the CNIL, the supervisory authority. They must be particularly responsive to requests from the CNIL and attentive to compliance with its deadlines. They must refer all requests from the supervisory authority to the City and guide and advise municipal departments. They must also be able to report on the progress of the work carried out to the CNIL at any time. All external communications must be discussed between the DPO and the relevant departments.– Maintenance of the record of processing activities: The controller must keep a written record of all categories of personal data processing activities carried out on behalf of the client.– Annual report: The DPO must prepare an annual report of their activities, to be produced and submitted within a maximum period of 2 months after each financial year.Exceptionally: – In the event of an urgent request requiring particularly rapid intervention, the client may impose a reduced response time, duly justified in light of the circumstances; – Conversely, the client may grant additional time for the execution of a specific service if justified by the DPO – Proofreading of a document or letter: – Drafting of a document or letter: – Conducting data protection impact assessments (DPIAs)Profile: Certified DPO (attach DPO certification to CV)Application: CV + cover letter + copies of diplomas to be sent to [e-mail]