Company Description
Original Equipment Solutions (OESL) is emerging as a stand-alone global leader in the automotive sector, with over 17,000 employees and €2 billion in annual sales. Operating in 15 countries across 35 locations, including technology centers, OESL will build on Continental’s rich legacy to deliver high-quality parts to major OEMs and commercial vehicle customers worldwide.
Why Join OESL ?
- Greater Impact: Take part in shaping the future of a dynamic organization, with the opportunity to bring ideas to life and reap significant professional rewards.
- Growth and Innovation: Work in a fast-moving, environment that encourages innovation and offers opportunities for continuous growth and expanding your skill set.
- Creative Space: Experience the entrepreneurial spirit of a start-up culture within a global organization, enjoying both the creative freedom and the responsibility needed to thrive in modern working environments.
- Tight-Knit Team: Join a highly collaborative team where individuals have the power to shape their work, make meaningful contributions, and drive collective success.
Job Description
- Informs and advises the organization`s management and the employees who carry out processing of personal data of their obligations under the EU Regulation no. 679/2016 and other provision of European Union or national law relating to data protection;
- Monitors compliance with EU Regulation no. 679/2016, with other European Union or national law related to data protection and with the company`s policies and procedures related with data protection, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits;
As part of its compliance monitoring tasks, it undertakes the following:
- collects information to identify processing operations;
- Analyses and verifies the compliance of processing operations;
- informs, advises and issues recommendations to the company's management;
- actively participate in conducting Data Protection Impact Assessment (DPIA) and monitor its performance pursuant to Article 35 of EU Regulation no. 679/2016.
- Advising staff and management team in managing personal data security incidents;
- Permanent monitoring of the data processing processes carried out by the organization as controller or processor, identifying areas for improvement and providing support in implementing the necessary changes to ensure compliance with the highest standards of good practices in the field of data protection;
- Performs constant adaptation of internal procedures to the organization's business processes so as to maintain compliance with EU Regulation no. 679/2016;
- Facilitates the implementation of internal policies and procedures related to data protection;
- Issuing recommendations and providing expert assistance to the organization regarding the interpretation and application of the provisions of the legislation on personal data protection;
- Performs analysis and assessment of the risks of processing personal data and the conformity of personal data processing operations;
- Conducting risk assessment for high-risk processing in connection with data protection requirements, including data security, security breach notification, privacy by design, legitimate interest, purpose limitation and fair processing;
- Perform identification of business processes and systems that relate to personal data and are deemed in-scope for data protection;
- Drafting of points of view on specific issues of personal data protection;
- Promote the data protection principals within the organization;
- Continuously monitor and inform the organization in relation with the changes in the legislation, in particular in the area of personal data protection;
- Performs analysis and responds of requests from data subjects under the GDPR (right of access, right to be forgotten, right to rectification of data, etc.);
- Prepares inventories and maintains a register of processing operations (ROPA);
- Maintain a registry of all incidents, complaints, data breaches and notifications;
- Cooperation with the supervisory authority and assuming the role of contact point for the supervisory authority on processing matters, including the prior consultation referred to in Article 36 of EU Regulation no. 679/2016, as well as, if applicable, consultation on any other matter;
- Represent the organization in dealing with data protection matters including complaints, data breaches and notifications;
- Manages the relationship with the supervisory authority in the field of personal data protection;
- Conducts audits on data protection compliance;
- Prepares an annual report of the DPO's activities;
- Elaborates and organizes training for employees and management on their responsibilities under data processing activities;
Qualifications
- Bachelor`s degree in law
- Several years of professional experience in a similar position [data protection laws]
- Data Privacy Certifications would be a plus
- Advanced knowledge of European data protection laws and AI Act
- Excellent understanding and experience with international privacy laws
- Solid understanding of IT and AI technologies and their implications for data protection
- Ability to assess risks and implement mitigation measures
- Fluent german and english skills in spoken and written
- Experience working with cross-functional teams
Applications from severely handicapped people are welcome.
Additional Information
The well-being of our employees is important to us. That's why we offer exciting career prospects and support you in achieving a good work-life balance with additional benefits such as:
- Training opportunities
- Mobile and flexible working models
- Sabbaticals
- and much more...
Sounds interesting for you? Click here to find out more.
#Jobdrehscheibe
Sie wollen mit uns Gas geben? Starten Sie durch und bewerben Sie sich jetzt!