Job
- Level
- Experienced
- Location
- Göttingen
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Project, Security
- Employment Type
- Full Time
- Contract Type
- Temporary employment
Job Summary
In this role, you manage a data protection management system, conduct data protection impact assessments, coordinate technical measures, and handle the processing of data subject rights and data breaches.
Job Technologies
Your role in the team
- Management of a Data Protection Management System (DPMS), including policies, processes, and KPIs.
- Maintaining a record of processing activities (RoPA); conducting Data Protection Impact Assessments (DPIA/DSFA) and balancing of legitimate interests.
- Coordination of technical and organizational measures (TOM) in accordance with Art. 32 GDPR with IT/InfoSec and their regular review.
- Management of data breaches (reporting, forensics, insights gained) and process-compliant handling of data subject rights (access, deletion, etc.).
- Contract management within the scope of data processing agreements (DPA), including standard contractual clauses, transfers to third countries, TOM reviews, and supplier audits.
- Training sessions, awareness campaigns, and consulting for specialized departments; sparring for product development ('Privacy by Design/Default').
- Planning and conducting internal audits/gap analyses; follow-up on actions and reporting to management.
- Monitoring of legal/regulatory developments (GDPR/BDSG, TTDSG/ePrivacy, Schrems II, guidelines from supervisory authorities).
- Close collaboration with the Information Security, Legal/Compliance, IT departments, and, if applicable, the Data Protection Officer.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed master's degree (e.g., Law, Business Informatics, Computer Science, or Business Administration with a focus on Compliance) or a comparable qualification.
Qualifications
- Very good knowledge of GDPR/BDSG; understanding of ISO 27001/27701 and ISMS processes.
- Proficient handling of DPIA, RoPA, TOM, AV agreements, SCCs, and processes related to the rights of data subjects or incidents.
- Strong communication and consulting skills; ability to implement complex requirements practically.
- Structured, independent working style; high result orientation and team skills.
- German at least C1, English at least B2.
Experience
- Several years of experience in operational data protection management.
This text has been machine translated. Show original
What we offer
- Flexible working hours and the possibility of remote work.
- A modern, diverse, and exceptional working environment with close proximity to science and research at the intersection of several innovative technology sectors.
- An interesting and diverse activity in a large, internationally active IT competence center.
- Collaboration within a competent and dedicated team.
- Support in qualifying and further developing your skills both in an academic environment and with regard to a career in business.
- Public sector social benefits.
This text has been machine translated. Show original
Benefits
Food & Drink
Health, Fitness & Fun
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
Gesellschaft für wissenschaftliche Datenverarbeitung mbH Göttingen
As the university computing center for the Georg-August University of Göttingen and computing and IT competence center for the Max Planck Society, we offer a wide range of information and communication services for science.
Description
- Company Size
- 250+ Employees
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Healthcare, Social Sector
Data protection manager
- Location
- Göttingen
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
