Data Protection Analyst (m/f/d)

About the role

PwC Luxembourg is hiring a Data Protection Analyst (m/f/d) for its Data Protection office, within the IFS - Office of General Counsel line of service. The analyst ensures compliance with PwC's policies, standards and guidelines as well as applicable laws, regulations and best practices, and advises and assists all lines of service on data protection matters relating to operations and technology.

Key responsibilities

• Assist the Data Protection Manager in implementing the Data Protection Program and strengthen collaboration with lines of service to embed data protection in operational activities.
• Guide internal owners (Data Office, Project Managers, business and IT) on completing documentation such as the Register of Processing Activities, and review the quality of tasks handled by Network Information Security and the Legal department.
• Identify gaps between data processing and PwC standards through data protection assessments (risk analysis, TIA, DPIA, LIA).
• Help inventory and assess personal data processing, supporting assets and governance measures, and conduct interviews, audits and surveys to assess compliance and recommend improvements.
• Assist with remediation of control deficiencies and implement technical and organisational measures to reduce risk.
• Monitor technology trends, test tools, report accurately to Supervisory Authorities and PwC, stay aware of compliance changes, support employee training and help build a community of Data Protection champions.

Required profile

• Master's degree in law, business, information technology or another relevant field.
• 3 to 5 years of experience in a similar role.
• Strong knowledge of data protection regulations, especially the GDPR, applied to data governance and IT architecture.
• Fluent English and French.

Required skills

• Foundational understanding of ISO 2700X and EBIOS, with a focus on risk analysis.
• Proficiency in Excel, Word, PowerPoint and familiarity with Windows environments (OS, SharePoint).
• Solid grasp of databases and applications.
• Ability to act as a Business Analyst or Risk Analyst, modelling operational processes (BPM).