LightTower Consulting - People & Culture Advisors

Compliance

• Key role in the development and management of company-wide GRC structures with a focus on data protection/GDPR
• Design, development and implementation of internal policies, standards and processes with an emphasis on data protection and compliance
• Monitoring adherence to legal, regulatory and internal requirements, in particular regarding data protection/GDPR
• Implementation of technical and organizational measures (TOMs) to ensure data security
• Identification, assessment and management of risks in national and international contexts
• Advising and training internal departments on compliance and data protection topics
• Monitoring regulatory developments and deriving strategic actions
• Analyzing and optimizing internal processes as well as preparing reports and recommendations for executive management
• Acting as the central interface between executive management, internal departments and external audit bodies; reports directly to the Head of International GRC

Governance, Risk & Compliance Officer, Data Protection