Data Protection Officer (DPO)

Role overview

Infinity Investment is looking for an experienced and driven Data Protection Officer to join its Legal & Compliance function in Tirana. In this role, you will help ensure the company follows Law No. 124/2024 on Personal Data Protection, along with other relevant privacy rules and internal data governance requirements. You will act as an independent advisor on privacy matters, keep track of compliance across the business, and help build a strong culture of accountability around personal data.

What you will do

• Track the company’s adherence to personal data protection laws, internal procedures, and regulatory obligations.
• Guide managers and employees on privacy duties and data protection responsibilities.
• Create, revise, and maintain privacy policies, procedures, notices, and supporting documentation.
• Carry out privacy risk reviews and follow up on the use of suitable technical and organizational safeguards.
• Support Data Protection Impact Assessments (DPIAs) and advise on ways to reduce privacy-related risks.
• Serve as the main contact for the Commissioner for the Right to Information and Protection of Personal Data and coordinate with other supervisory bodies when needed.
• Handle data subject requests and provide advice on individuals’ privacy rights.
• Run awareness initiatives and training sessions to strengthen privacy understanding across the organization.
• Assist with internal audits and compliance checks related to personal data protection.
• Keep clear and accurate records that demonstrate compliance with legal and regulatory requirements.

Qualifications and experience

The ideal candidate should hold a bachelor’s degree in Law. A master’s degree or a specialist certification in Data Protection, Privacy, or Compliance will be considered a plus. You should bring 3 to 5 years of professional experience in Data Protection, Privacy, Compliance, Risk Management, Audit, or a similar legal role. Strong working knowledge of Albanian Law No. 124/2024 is essential, and familiarity with the GDPR is a strong advantage. Experience drafting and putting into practice internal policies, procedures, and compliance frameworks is also important.

Skills and competencies

• Data protection and privacy compliance
• Legal and regulatory analysis
• Privacy risk assessment
• DPIA support and review
• Policy and procedure development
• Audit and compliance monitoring
• Stakeholder communication
• Training and awareness delivery
• Documentation and record keeping
• Microsoft Office proficiency
• English language fluency
• Discretion and integrity

Additional requirements

You should also have strong analytical, organizational, and problem-solving abilities, along with excellent communication and stakeholder management skills. The role requires a high level of professionalism and discretion when dealing with confidential information, as well as strong written and spoken English and solid proficiency in Microsoft Office tools.

Application information

Interested candidates should send their CV to hr@infinityinvestment.al using the subject line: Application – Data Protection Officer (DPO). For further information, you may contact +355 69 702 0295. Only shortlisted candidates will be contacted. Any personal data shared during recruitment will be handled in line with Law No. 124/2024 on Personal Data Protection.

Industry

Entertainment Providers