Privacy & Data Protection Expert - Supervising Associate

About the role

EY Luxembourg is hiring a Privacy & Data Protection Expert (Supervising Associate) for its internal Data Protection Office, the in-house data protection department. You will work on a wide range of privacy and data protection topics under the supervision of the Data Protection Officer.

Key responsibilities

• Carry out and review Data Protection Impact Assessments (DPIAs), including advising on privacy by design and by default
• Ensure compliance with privacy and data protection laws (GDPR, AI acts, Digital acts, etc.) and support the Data Protection Officer in day-to-day duties
• Identify and evaluate data processing activities and keep the data protection registers up to date
• Handle requests from data subjects exercising their GDPR rights
• Prepare and implement GDPR/data protection guidelines, policies and notices
• Assist in data breach incidents and in drafting Data Processor Agreements
• Raise awareness and deliver GDPR and privacy training to management and staff
• Help design risk mitigation strategies for emerging privacy, AI and cybersecurity threats and regulatory changes

Required profile

• Bachelor's or Master's degree in law, compliance or information technology, with expertise in data protection, privacy, new technologies laws, data management, cybersecurity or AI
• 3 to 7 years of relevant professional experience
• Fluent English; French, German or Luxembourgish is a benefit
• Excellent writing, communication and presentation skills, and strong organisational, problem-solving and prioritisation skills

Required skills

• Thorough understanding of GDPR and other privacy and cybersecurity regulations
• CIPP/E or CIPM is an asset but not compulsory