Privacy Officer

Data also plays an increasingly large role in the energy transition. As Privacy Officer for the CEO domain, you are the central figure in the protection of our employees' personal data. You act as a sparring partner and point of contact for the business regarding privacy. This means, for example, that you advise the HR, Communications, HSEQ, and Strategy departments on various privacy issues. In doing so, you work closely with the Data Manager, Data Protection Officer, the privacy lawyer, and your fellow Privacy Officers. In this role, you report to the Manager Analytics, Data, and Processes at HR FM.

As Privacy Officer, you implement the organization-wide privacy policy within the CEO domain and support the business in its execution. As Privacy Officer, you work closely with security officers and colleagues from the CISO, for example, for the monitoring of our processors (suppliers) and in the field of information security.

These are your responsibilities

• Provides professional advice at a (tactical/strategic) level regarding privacy issues within projects and complex change processes.
• Translates privacy policies, procedures, and templates into domain-specific frameworks/needs and ensures application.
• Ensures privacy by design and privacy by default during the development and modification of HR and FM processes, systems, data products, and services.
• Advises and supports in identifying, discussing, and elaborating on tactical and strategic issues in the field of privacy.
• Advises on the responsible use of personal data within data analysis, reporting, AI applications, algorithms, and automated decision-making.
• Handles data breach notifications in a timely and accurate manner and is responsible for making the correct strategic assessment in consultation with the DPO.
• Involvement in drafting and negotiating data processing agreements and in procurement processes.
• Keeping the processing register and related documents up to date.
• Monitors the effectiveness of privacy control measures, identifies deficiencies, and reports on these periodically to management.
• Performing Data Protection Impact Assessments for high-risk processing, for example, in the field of HR, and monitoring the follow-up of measures.
• Advises on lawfulness, purpose limitation, proportionality, data minimization, retention periods, and access to personal data.
• Is co-responsible for keeping our privacy statement up to date and assists with publication to data subjects.
• Coordinates the consultation structures and ensures knowledge transfer and the activities of the Privacy contact persons and other stakeholders within your domain.
• Supports and participates in the implementation of the awareness program.