Data Protection Analyst (m/f/d). Luxemburgo

Your mission: As part of our Data Protection office, you will ensure the effective compliance with our PwC policies, standards and guidelines as well as applicable laws, regulations and best practices. You will play an important part in all aspects of regulatory proceedings involving the Firm and its personnel by advising and assisting all lines of services on Data Protection matters relating to its operations and technology.

Be a part of a team where you will:

    Assist the Data Protection Manager in the day-to-day operations related to the implementation of the Data Protection Program;

    Strengthen the collaboration with the various Lines of Services to translate the Data Protection control objectives enabling to identify and implement measures to embed data protection throughout the operational activities, and ensure timely implementation of project activities.

    Provide guidance to internal owners (Data Office, Project Managers, business and IT) for a consistent completion of the documentation, such as the Register of Processing Activities;

    Provide guidance to internal owners (Network Information Security, Legal department) involved into the Data Protection Program and review the quality of their related tasks handling;

    Identify gaps between data processing and PwC standards in performing data protection assessments (Risk analysis, TIA, DPIA, LIA…);

    Assist the Data Protection Manager to identify, inventory and assess the personal data processing, associated supporting assets and applicable governance measures;

    Conduct interviews/audits/surveys with different internal owners (business and IT) and/or external counterparts to assess compliance and suggest appropriate recommendations;

    Assist with remediation of control deficiencies/gaps identified during the review process;

    Seek solutions, implement and follow-up efficient technical and organizational measures to reduce risks and to ensure compliance;

    Technology watch and robust tool testing;

    Collaborate closely with IT, Data Office, Project Managers, business (HR, Infrastructure, Finance, Lines of Services…), Network Information Security and our Legal department;

    Accountable for integrity, accuracy and timeliness of reporting to Supervisory Authorities and PwC (including PwC Network);

    Maintain awareness of compliance changes that may affect PwC's environment;

    Support the education and training of PwC's employees so they better understand their responsibilities for compliance with PwC's policies, standards and guidelines as well as applicable with applicable laws ;

    Participate in the construction and animation of a community of Data Protection champions.

Let's talk about you. If you are/have...

    A Master's degree in law, business, information technology or any other relevant field;

    3 to 5 years of experience in a similar role;

    Knowledge of regulatory requirements on data protection (especially the GDPR) and ability to transpose them to data governance and IT architecture;

    Ability to understand how PwC organizational units operate;

    Ability to quickly understand PwC's projects directly or indirectly related to data governance or quality (including PwC Network);

    Fully understand the data lifecycle and ability to act as a Business Analyst or as a Risk Analyst on interviewing operational teams, challenging their answers and modeling operational processes (BPM);

    Ability to quickly understand (and proactively contribute to) the PwC's policies and guidelines regarding data handling and IT security (including PwC Network);

    Basics understanding ISO 2700X and EBIOS, focused on risk analysis methodology;

    Computer literate (Excel, Word, PowerPoint...) and comprehension of Windows environments (e.g. OS, SharePoint);

    Comprehension of databases and applications;

    Fluent in English and French