GDPR Single Point of Contact (SPOC)

Job description

The Warsaw office was established in 2008 and comprises two business lines: a dynamically growing International Operations Centre (SSC) providing asset and fund services for a number of locations across Europe and local custody & clearing business offering broker-dealers, global custodians and investment banks a full local clearing, settlement and custody solution in Poland.

For new activity within BNP Paribas Securities Services in Poland which is an exciting, dynamic and growing operation centre in Warsaw we are looking for candidates who are willing to be a vital part of the expansion in BNP Paribas' operational scope in Poland.

GDPR Single Point of Contact (SPOC)

Responsibilities:

· Coordinate and lead operational implementation of Personal Data Protection policies and requirements
· Set guidelines and policies on Personal data Protection according to the Group policies and communicate them to the concerned operational managers
· Coordinate works within the 1st Level of Defence (LoD) on his/her perimeter
· Response and contribute to the response to Data subjects (employees, clients, suppliers, individuals…) requests and complaints pertaining to privacy and ensure escalation to Data Protection Officer (DPO) when relevant
· Facilitate and coordinate information toward data subjects (change on contracts, information notice distribution, etc.)
· Coordinate the data subject requests and response between the location and the central dedicated cell
· Maintain up to date reporting with all data subject requests and ensure protection of personal data across the organisation
· Deploy cross-border transfers in accordance with Group Personal Data Protection policies
· Ensure the effective implementation and long term compliance with personal data protection Group policies
· Perform risk assessment of new products or activities to comply with Privacy by design principles
· Identify high risk processing activities and perform Data Protection Impact assessments (DPIA)
· Implement personal data controls in business operations and IT
· Ensure promotion of data protection culture within the organization and ensure implementation of training plan
· Assist operational teams on level 1 risk assessment (internal consultation) and produce report for 2nd line of defense

Desired profile

Qualifications :

Requirements:
·  Knowledge and experience in personal data protection
·  Understanding of data processing operations (including business applications and data use)
·  Experience in project management and change management
·  Fluent working knowledge of English
·  Showing independency, objectivity and integrity
·  Excellent writing and communication skills
·  Ability to lead, engage and work transversally

We offer:
·  Stable employment on the basis of full-time job contract
·  Complex trainings preparing to achieve independence on the position
·  Supportive and friendly work atmosphere with many opportunities to integrate with work colleagues (football league, volleyball and basketball classes, integration weekends, etc.)
·  Wide range of trainings and development opportunities
·  Attractive benefits package (medical care, multisport card, lunch card, co-funding of language courses and many more)
·  Prestigious work location near Rondo Daszyńskiego


Candidates meeting the above mentioned requirements and interested in cooperation are asked to e-mail their applications in English (CV),

Thank you in advance for sending your application. We kindly inform you we will contact only chosen candidates.

BNP Paribas promotes equality of opportunity and is committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity, race, religion or belief, sex or sexual orientation.

Please attach the below clause to your application: I hereby give consent for my personal data included in my application to be processed for the purposes of the recruitment process in BNP Paribas Securities Services under the Personal Data Protection Act as of 29 August 1997, consolidated text: Journal of Laws 2016, item 922 as amended.