Data Protection Correspondant-dpc

**GRUPO BNP PARIBAS**

El Grupo BNP Paribas es el principal banco de la Unión Europea y uno de los más importantes a nível internacional. Contamos con cerca de 185.000 empleados en 65 países. En España somos más de 5.100 empleados en 13 líneas de negocio.

**PERSONAL FINANCE**:
BNP Paribas Personal Finance, a través de su marca comercial Cetelem, es especialista en crédito al consumo, préstamos personales y gestión de tarjetas. Es partner financiero de importantes empresas de distribución, de bienes de consumo y concesionarios de automóviles y, además, un referente de análisis de mercado gracias a los estudios del Observatorio Cetelem. BNP Paribas Personal Finance cuenta con 20.000 empleados prestando servicio a más de 20 millones de clientes.

**SOBRE EL PUESTO**:
MISIÓN

To define, secure and monitor the archivement of the legal requirements related to privacy and data protection under the scope of Risk Management.

TASK & RESPONSABILITIES
- To manage communication with any third parties.
- To monitor the personal data framework of the entities under scope
- To monitor and to provide opinion related to the implementation of “privacy by design” principles in close collaboration with Legal, Business and IT areas.
- To review & to give opinion about security principles implemented related to personal data treatment.
- To review the processing activity registers
- To build and to implement a robust sensibilization program for the entities under scope
- To collect the necessary info from other areas and to elaborate the answer to those claims received from the Spanish Data Protection Agency, building the right processes to obtain in time the info.
- To define and to execute the LoD2 controls and to perform independent test of the personal data protection framework to verify its relevance.
- To provide independent reports and to alert, when necessary, about the critical points not covered to the Top Management and DPO of territory.
- To coordinate DPC activities under its scope
- To coordinate & to elaborate the Personal Data Protection & Privacy committee and to contribute to the territory and PF consolidated PDP&P committee.
- To be part of the TAC/NAC committees as well as of any project that involves personal data treatment, providing an independent opinion.
- Close collaboration with Operational Risk department (also in Risk Department) to monitor LoD1 correct implementation of control framework & RCSA related to Data protection activities. To monitor the right declaration of HI, PI in the group tool, and to define and to supervise the implementation of actions plans defined.
- To manage the relationship with internal / external auditors and regulatory supervisors.

**SKILLS**:

- Well knowledge of applicable laws & regulations related to the financial industry in terms of personal data protection.
- Deep knowledge to implement, to develop and to monitor the control framework of data protection.
- Communication skills
- Flexibility
- To be identify with the entity purpose.
- Management of people
- Customer oriented
- Analytical thinking
- Strategic thinking
- Teamwork and transversal focus
- Knowledge about the entity activities / consumer lending market

**EXPERIENCE**:
Minimunm 5 years in DPC/DPO roles in banking or consumer entities performing functions as detailed above.

KNOWLEDGE OF TOOLS DESIRABLE
- Microsoft Office
- Power BI
- SQL Basic

VALUABLE SKILLS
- Communication
- Flexibility
- Identification with the company
- Results Orientation
- Customer Focus
- Analytical thinking
- Teamwork and Coorperation
- Knowledge of the company and the business
- Knowledge of consumer credit market

LANGUAGES
- Spanish
- English B2
- French will be valued

**BENEFICIOS**
- Programas de formación, planes de carrera y oportunidades de movilidad interna, no solo a nível nacional sino también a nível internacional gracias a nuestra presencia en diferentes países.
- Comité de Diversidad e Inclusión a nível Grupo que vela por un ambiente de trabajo inclusivo. En los últimos años se han creado varias comunidades de empleados que organizan diferentes acciones de concienciación en torno a la diversidad e inclusión (PRIDE, We Generations y MixCity).
- Programa de voluntariado corporativo (1 Million Hours 2 Help) en el que los empleados pueden dedicar tiempo de su horario laboral a actividades de voluntariado.
- Plan de retribución flexible.
- Modelo de teletrabajo híbrido (50%).
- 31 días de vacaciones.

**COMPROMISO DE DIVERSIDAD E INCLUSIÓN**: