ProCredit Bank Bulgaria is part of the international ProCredit Group, which is headquartered in Frankfurt, Germany. We are a flexible and innovative bank. We are pioneers in the modern and pragmatic banking solutions, personally tested by us, that have positive impact for our customers. We are constantly optimizing our processes, improving the customer experience every day. We stand out with convenient and fast digital banking, clear and transparent conditions, high quality of service. For us, the topic of environmental protection, social responsibility and people's education is not a trend, but a permanent attitude. We believe that people are the engine of change and the instigator of innovation.
ProCredit Bank is currently seeking a candidate for the position of Senior Data Protection Expert, which is going to support the organization's compliance with data protection and privacy regulations, including GDPR and applicable local legislations both in Bulgaria and Greece. The role provides expert guidance on privacy risks, data governance, data processing activities, and regulatory requirements while supporting the relevant units and stakeholders in implementing effective data protection controls.
Key Responsibilities- Acting as subject matter expert engaged with the Personal Data Protection Framework (Privacy Governance) - maintain the internal regulatory and governance framework and privacy policy; prepare the annual privacy compliance monitoring plan; prepare reports and updates for the Management Board; monitor regulatory and legislative developments in data protection, provide opinions and consultations on projects, with regard to processing of personal data.
- Maintain the record of processing activities (RoPA) in accordance with Article 30 of the GDPR; maintain the registers of: data processors, international data transfers to third countries, personal data breach, data subjects requests
- Ensure proper retention and archiving of documentation
- Perform advisory services to peers and units on GDPR and privacy-related matters
- Conduct periodic GDPR compliance reviews and assessments
- Perform thematic reviews of specific business processes; monitor the implementation of corrective actions; conduct compliance reviews of branches and offices; perform privacy assessments of service providers; coordinate privacy self-assessment activities.
- Perform privacy risk management; maintain privacy risk register
- Ensure integration with Operational Risk Framework
- Perform DPIAs
- Assess personal data security incidents and data breaches
- Manage access, rectification, erasure, restriction of processing, data portability and objection requests
- Perform vendor and contract management related to data processing agreements and Standard Contractual Clauses, conduct privacy assessment of vendors, monitor international data transfers, etc.
- Deliver mandatory privacy training programs and privacy awareness campaigns
- Prepare the annual data protection report and quarterly privacy reports if needed.
Requirements- University degree in Law, Information security, business administration, Risk Management or related field
- 5+ years of experience in data protection or privacy compliance
- Experience working with GDPR and international privacy regulations
- Experience in the banking, financial services, insurance, or regulated sectors is an advantage
- Any of CIPP/E (Certified Information Privacy Professional Europe), CIPM (Certified Information Privacy Manager) or CDPO, DPO Certification, or equivalent privacy qualification would be considered an advantage
- Strong knowledge of GDPR and European privacy requirements
- Knowledge of privacy risk assessments and DPIAs.
- Excellent analytical and problem-solving skills.
- Strong stakeholder management and communication abilities.
- Experience with regulatory audits and inspections.
- Strong written and verbal English communication skills.
- Responsible approach with strong attention to detail.
- Critical thinking and ability to work independently.
- Proactive organization and effective task prioritization.
- Motivated and goal-oriented mindset.
- Respect for deadlines and high professional standards.
- Soft skills and ability to collaborate across different cultures and teams.
Our offer:- Working in a dynamic international environment
- Professional growth in a motivated team
- Training opportunities
- 2 days per week home office option
- Flexible working time (from 7:30-09:00 a.m. to 16:30-18.00 p.m.)
- Social benefits: 25 days annual paid leave, additional health insurance, Multisport card, transportation cost amount, preferential conditions for products and services in the Bank; preferential fees for education at Denis Diderot School
Only short-listed candidates (selected on submitted CV) will be invited to the upcoming stages of the selection process.
Your application will be treated with strict confidentiality and compliance with the legal requirements for personal data protection.
