Legal and Data Protection Officer

Innovación, Espíritu de Equipo, Cercanía y Compromiso. The primary role of the data protection officer (DPO) is to ensure that Sofinco processes the personal data of its staff, customers, providers or any other individuals in compliance with the applicable data protection rules (mainly GDPR & LOPD_GDD). Additionally, DPO mission is to support daily activities of the areas giving data protection rules assessment to the current and new products.Ensure that controllers and data subjects are informed about their data protection rights, obligations and responsibilities and raise awareness about them. Give advice and recommendations to Sofinco about the interpretation or application of the data protection rules. Provides expert advice and guidance on and monitor data protection impact assessments. Provide and maintain the necessary documentation to demonstrate compliance with data protection laws applicable, including the GDPR & LOPD_GDD, records of data processing, Pre-PIA, DPIA, internal and external policies, procedures, templates and forms. GPS) are reviewed at least annually and kept up to date with changes in law and guidance from the data protection regulators. Provide training, awareness and expert advice to all employees regarding their obligations to comply with applicable data protection laws, including the GDPR & Privacy, when processing personal data. Ensure that training is available and delivered to all members of Sofinco staff involved in the processing or handling of personal data. Monitor Sofinco is compliance with applicable data protection laws, including the GDPR, including, where necessary, conducting internal audits. Informing stakeholders and employees within Sofinco of any changes to applicable data protection laws, including the GDPR, in a timely manner. Act as the single point of contact for data protection regulators (AEPD) on issues relating to the processing of personal data, and to consult with data protection regulators, where necessary, on any other relevant personal data matters. Act as the main point of contact and cooperate with employees and data subjects on matters related to data protection. Develop and maintain the processes and procedures for reporting personal data breaches and take the necessary measures to inform the relevant stakeholders as required by applicable data protection laws. Alongside the Information Governance and Security teams, contribute to the review and development of security procedures and other controls for the protection of personal data.DPD or Privacy Certification, Cybersecurity and/or IA background ~Advanced English user (C1) ~ Proficient user of Microsoft Office tools: Excel, PowerPointContrato indefinido con salario competitivo. ~ Ser parte de una empresa joven y, a la vez, de un gran Grupo internacional, con una cultura basada en la cercanía y en el trabajo en equipo. ~Beneficios sociales: tarjeta restaurante, seguro de salud, seguro de vida, ayuda para la educación de tus hijos… ~ Horario flexible y modelo híbrido de teletrabajo. ~26 días de vacaciones anuales. ~ Retribución flexible para tickets guardería, tarjeta transporte y formación. ~ Un gran catálogo con formación permanentemente actualizada: en idiomas, regulatoria, formación interna para que conozcas qué hacen otras áreas, interesantes descuentos por ser parte de Sofinco en Masters y cursos especializados… ~ Ser parte de una empresa socialmente responsable, que promueve la igualdad de oportunidades para todos, colaborando con ONGs y con asociaciones, concienciada con el cambio climático e involucrada en proyectos únicos que aportan valor a la sociedad.Sofinco es una empresa comprometida con la igualdad, la diversidad y la integración a todos los niveles. El proceso de selección de Sofinco se basa en la igualdad, evaluando cada candidatura con criterios objetivos basados en la experiencia, formación, habilidades y competencias, sin que medie ninguna discriminación por razón de sexo, edad, raza, etc.*