Governance Risk and Compliance Expert - Advanced

Sword Technologies N.V./

2d • Hybrid

About The Position

This role requires an expert in Governance, Risk, and Compliance with a focus on data protection within an ICT, EU institutional, public-sector, or technology-heavy environment. The position involves understanding EU data protection legislation, IT operations, and IT service delivery, and applying this knowledge to organizational and IT processes. The expert will lead the development of data protection policies and procedures and communicate complex topics to various audiences.

Requirements

• At least 5 years of personal data protection compliance experience in an ICT, EU institutional, public-sector or similarly technology-heavy environment.
• At least 3 years of hands-on experience preparing, updating or reviewing RoPAs, DPIAs, DPA, TIA.
• At least 2 years of experience analyzing and documenting technical arrangements relevant to personal data protection, including access rights, privileged access, logs or SIEM/log exports, retention, hosting, data flows, support access, transfers, processors or sub processors.
• Ability to work with incomplete or inconsistent ICT-related information, distinguish confirmed facts, assumptions, open questions and missing evidence, identify gaps or contradictions between declared system behavior and likely technical reality, and structure clear next steps or status for review or management follow-up.
• At least 3 certifications among: CISA, CISM, GSNA, GCCC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager, CAP, CRISC, CISSP-ISSMP, GIAC Certified ISO-27000 Specialist or equivalent certification recognized internationally (subject to acceptance as a valid credential by the Contracting EU-I).

Responsibilities

• Carry out working-life practices of the data protection and privacy issues involved in the implementation of the organizational and IT processes.
• Lead the development of appropriate standards and privacy policies and procedures.
• Explain and communicate data protection and privacy topics to different types of audience.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed