Data Protection Manager

Role Overview

We are seeking a Data Protection Manager based in Germany to lead and enhance the organization's privacy and data protection program. This role involves a strategic and hands-on approach to ensure compliance with data privacy regulations across various business units, partnering closely with legal, compliance, security, and product teams. The manager will lead a small privacy team and integrate privacy principles into business and technology processes, fostering a culture rooted in accountability.

Key Responsibilities

• Lead and support a small privacy team by setting priorities, reviewing work, and promoting growth.
• Develop, implement, and refine the company’s data privacy frameworks, policies, and governance structures.
• Maintain essential privacy records such as Records of Processing Activities (RoPA), risk registers, and Data Protection Impact Assessments (DPIAs).
• Ensure adherence to GDPR and other relevant data protection laws, monitoring regulatory updates and advising on enhancements.
• Create and manage Data Processing Agreement (DPA) templates and oversee their application within the business.
• Handle Data Subject Request (DSR) procedures and ensure timely compliance with legal mandates.
• Advocate for privacy-by-design and privacy-by-default concepts throughout project development with business and product teams.
• Manage incident response related to personal data breaches including evaluation, documentation, and notifications.
• Coordinate privacy audits, vendor risk evaluations, and internal compliance initiatives.
• Serve as the principal data protection advisor and deliver privacy awareness and training across the organization.

Required Qualifications and Experience

• Bachelor’s degree in Information Management, Law (focused on Data Protection or Privacy), Data Science, or equivalent professional experience.
• A minimum of 5 years’ experience in data privacy, information security compliance, or related fields.
• Proven leadership or mentoring experience of small teams.
• Strong proficiency with GDPR, CCPA, and at least one other data privacy framework.
• Knowledge of AML/KYC obligations and data protection requirements in regulated sectors.
• Practical experience with privacy program implementation, DPIAs, and management of DSR processes.
• Familiar with privacy management tools and data governance systems.
• Excellent interpersonal and stakeholder engagement abilities, capable of translating regulatory complexities into practical business actions.
• Professional privacy certifications like CIPP/E, CIPM, or CIPT are advantageous.

Benefits and Working Conditions

• Attractive salary package competitive with local market standards.
• Remote working option available within Romania.
• Work-life balance support initiatives.
• High autonomy with ownership over role responsibilities.
• A collaborative and innovation-driven working culture.
• Opportunities for career advancement and professional growth.
• Work with a dynamic international team in a quickly expanding company.
• An inclusive workplace that values meaningful contributions.

Additional Information

This position is advertised for a partner company that manages recruitment and selection. The hiring company uses AI-assisted tools for initial candidate screening but makes final hiring decisions through human evaluation. Applicants’ personal data will be processed according to GDPR and data privacy laws with rights to access, correct, or object as applicable.