Head of Group Information Governance

**We Are Waiting for You**

Hi there

I am **Álvaro,**the recruiter for this position. Nice to meet you

First, a little bit about what I like the most about working at** Zurich Technology Delivery Center**: The environment here is incredibly collaborative and innovative. Our tech-driven mindset fosters continuous learning and growth, creating an atmosphere where everyone can thrive. Now, I can't wait to share this exciting journey with you at **Zurich**

First of all, THANK YOU for considering our company. We understand that finding the right opportunity can be tough, but I’ll try to make it easier.

**Who Are We?**

Let me introduce us. You’re reading about **Zurich Insurance Group**, a global leader in insurance, but this role specifically pertains to our **Technology Delivery Center (TDC).** Established in Barcelona in 2006, the TDC operates as an integral part of Zurich Insurance Group, providing cutting-edge technological solutions and support to Zurich's local and global business units.

In essence, Zurich TDC is where technology meets the vast reach of a multinational company. We specialize in areas such as software development, data analytics, cybersecurity, and IT infrastructure. Our primary mission is to support Zurich's strategic goals and enhance operational efficiency through innovative technology solutions.

If you're considering a role with us, know that you'll be joining a hub of technological excellence dedicated to driving Zurich's success on a global scale.

**What Can You Expect?**

And you might be thinking: This is great, what will my day-to-day be like, at TDC? I’m glad you asked.

As the Head of Group Information Governance you will have the opportunity to:

- **Strategic Leadership**
- **Drive** Information Governance strategy for Group and Corporate Center, including initiatives such as lifecycle management for unstructured data, global data classification standards and transformation programs
- **Lead** global IGO network via regular community meetings across EMEA, LATAM, APAC and Global Ventures
- **Collaborate**with Group Compliance, Legal, Risk, and Cyber security to ensure unified governance and regulatory alignment
- **Act** as strategic advisor to senior leadership and represent Information Governance in global forums

- **Operational Execution**
- **Guide and support** Corporate Center Functions in fulfilling their obligations under the DPRM Policy and DPRM controls, including support on creation and maintenance of ROPAs and Record Retention Schedules
- **Oversee and conduct** privacy assessments (Data Flow Analysis, Data Privacy Impact Assessments, Data Transfer Impact Assessments) for Corporate Center projects and services as well as for Group-wide initiatives
- **Collaborate** with Group Compliance in the definition and implementation of the DPRM policies, including development of Group guidance material and Corporate Center-specific standards
- **Coordinate and support** data incident management, including assessment of breaches, severity classification and root cause analysis
- **Run** information Governance awareness campaigns, including tailored business led trainings

**What Makes You a great Fit?**

While we’re not seeking perfection or expecting you to save the world, we believe that if you meet some of these requirements, you’ll be a fantastic fit for our team. **We are waiting for you**

**Experience & Skills**

- **Extensive Information Governance expertise**
Demonstrated experience driving global strategies in data lifecycle management, data classification, and transformation programs.
- **Leadership & Influence**
Proven ability to lead diverse, international teams and foster a collaborative governance network across multiple regions.
- **Stakeholder Management**
Strong track record of partnering with Compliance, Legal, Risk, and Cyber Security teams to deliver unified solutions and regulatory alignment.
- **Strategic Advisory**
Experience acting as a senior advisor, representing Information Governance in global forums and influencing senior leadership.

**Technical Know-how**

- **Policy & Process Mastery**
Deep understanding of Data Privacy and Records Management (DPRM) policies, including creation and maintenance of Records of Processing Activities (ROPAs) and Record Retention Schedules.
- **Assessment & Analysis**
Skilled in conducting privacy assessments, such as Data Flow Analysis, DPIA, and DTIA, for projects and services at group and corporate levels.
- **Incident Management**
Experience assessing data incidents, classifying severity, and performing root cause analysis.

**Communication & Training**

- **Clear Communicator**
Ability to translate complex governance concepts into practical guidance, training, and awareness campaigns.
- **Training Delivery**
Experience designing and leading tailored, business-focused training programs.

**Personal Attributes**

- **Forward-thinking & Results-oriented**
You bring optimism, reliability, and a drive for