Data Protection Analyst (m/f/d)

About the role

PwC Luxembourg is hiring a Data Protection Analyst (m/f/d) for its Data Protection office, within the IFS - Office of General Counsel line of service. The analyst ensures compliance with PwC's policies, standards and guidelines as well as applicable laws, regulations and best practices, and advises and assists all lines of service on data protection matters relating to operations and technology.

Key responsibilities

• Assist the Data Protection Manager in implementing the Data Protection Program and strengthen collaboration with lines of service to embed data protection in operational activities.
• Guide internal owners (Data Office, Project Managers, business and IT) on completing documentation such as the Register of Processing Activities, and review the quality of tasks handled by Network Information Security and the Legal department.
• Identify gaps between data processing and PwC standards in risk analyses, TIA, DPIA and LIA, and help inventory and assess personal data processing and governance measures.
• Carry out interviews, audits and surveys with internal and external counterparts to assess compliance and propose remediation of control deficiencies.
• Implement and follow up technical and organisational measures to reduce risk and ensure compliance, and monitor technology trends and tool testing.
• Work closely with IT, the Data Office, Project Managers, business units, Network Information Security and the Legal department.
• Ensure accurate reporting to Supervisory Authorities and PwC, stay aware of compliance changes, support employee training and help build a community of Data Protection champions.

Required profile

• Master's degree in law, business, information technology or another relevant field.
• 3 to 5 years of experience in a similar role.
• Strong knowledge of data protection regulations, especially the GDPR, applied to data governance and IT architecture.
• Ability to act as a Business Analyst or Risk Analyst, modelling operational processes and engaging with operational teams.
• Fluent English and French.

Required skills

• Foundational understanding of ISO 2700X and EBIOS, with a focus on risk analysis methodology.
• Proficiency in Excel, Word, PowerPoint and familiarity with Windows environments (OS, SharePoint).
• Solid grasp of databases and applications.