Data Protection Counsel

About the role

As a Data Protection Counsel at Kaizen Gaming, you will play a crucial role in ensuring compliance with GDPR and other privacy regulations across various markets. Your responsibilities will include advising on privacy risks, conducting impact assessments, and developing data protection policies.

You will collaborate with cross-functional teams, including legal and tech departments, to implement data protection measures effectively. Success in this role involves proactive risk management, effective training programs, and thorough auditing practices to uphold the company's commitment to data privacy.

Skills that matter here

• data protection: This role requires in-depth knowledge of data protection laws to ensure compliance and manage risks.
• GDPR: You will be responsible for ensuring adherence to GDPR regulations across the organization.
• e-privacy: Understanding e-privacy laws is essential for advising on compliance and risks.
• legal compliance: You will oversee legal compliance related to data protection across multiple jurisdictions.
• policy development: Developing and maintaining data protection policies will be a key part of your responsibilities.
• risk management: You will identify and mitigate privacy risks associated with data processing activities.

Who this role suits

• A legal professional with a strong background in data protection, particularly within regulated industries.
• Someone who communicates complex legal concepts clearly to non-experts.
• A collaborative team player who can work effectively with both legal and technical teams.
• An analytical thinker who can address diverse problems with innovative solutions.

From the employer

Key Responsibilities

• Data Protection Compliance and Risk Management: Ensure compliance with data protection and e-privacy laws (including GDPR) and other relevant local or international regulations. Advise departments on privacy-related risks and support privacy projects driven by the Head of Data Protection.
• DPO Duties: Serve as the Data Protection Officer or contact point for designated entities and markets, fulfilling all associated statutory duties and responsibilities.
• Contract Review: Negotiate and draft contractual wording regarding data protection requirements with various internal and external stakeholders.
• Impact Assessments: Conduct and contribute to Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Privacy Impact Assessments (PIAs).
• Policy Development & Record keeping: Develop, contribute to, and maintain data protection policies, procedures, and applicable records, including in relation to data processing activities.
• Training and Awareness: Develop, contribute to, and deliver tailored training and awareness programs across departments to ensure all employees understand their data protection obligations.
• Auditing and Reporting: Monitor compliance with internal data protection policies, by reviewing or auditing internal practices, reporting key metrics and findings to the Head of Data Protection.
• Third-Party Management: Conduct reviews of third-party vendors and partners, ensuring they meet data protection requirements and contractual obligations, including Data Processing Agreements as required.
• Incident Management: Identify, assess, mitigate, and communicate data breach incidents both internally and externally, and conduct lessons-learned meetings with involved stakeholders.
• Data Subject Requests: Contribute to the training and oversight of Privacy Ambassador Teams to ensure proper handling of Data Subject and Requests from Supervisory Authorities, developing tailored procedures for specific markets.
• Expansion Support: Ensure compliance with local privacy laws in new markets during expansion projects and integrate new market privacy regulations into the organization’s policies.

Educational Background & Experience

• Bachelor's degree in Law.
• CIPP/E, CIPM, or equivalent data protection certifications are considered an asset.
• Minimum of 3 years of experience in data protection, ideally including one year of experience in the online gambling sector or another highly regulated industry (e.g., banking).
• Exposure to new technologies and AI is desirable.

General Skills & Competencies

• Excellent command of English with exceptional communication skills and the ability to explain complex legal concepts to non-experts.
• In-depth knowledge of data protection laws, including GDPR and ePrivacy.
• Proven experience working collaboratively with legal and tech teams to ensure seamless data protection operations.
• Hands-on experience with data protection audits, drafting policies, standard operating procedures, and DPIAs.
• Strong analytical and problem-solving skills, with the ability to manage diverse problems that require deep analysis and creative thinking.
• Strong ability to work collaboratively and effectively with cross-functional team members.

Kaizen Gaming Perks

• 🕑 Hybrid way of working
• 🏃 A buddy will support you with your onboarding
• 💸 Competitive pay and bonus scheme
• 👩‍⚕️ Private health insurance for you and your family
• ⭐ Developmental 360° feedback framework
• 📚 Unlimited access to Udemy & continuous training
• 👨‍👩‍👧‍👦 Family Support