Data Protection Analyst (m/f/d)

Overview

Support PwC Luxembourg's Data Protection Office in running the Data Protection Program, advising all lines of service on data protection matters and ensuring compliance with PwC policies, standards and applicable laws.

What you'll do

• Assist the Data Protection Manager in the day-to-day operations of the Data Protection Program
• Strengthen collaboration with the Lines of Services to translate data protection control objectives into measures embedded in operational activities, and ensure timely implementation of project activities
• Provide guidance to internal owners (Data Office, Project Managers, business and IT) on consistent completion of documentation, such as the Register of Processing Activities
• Provide guidance to internal owners (Network Information Security, Legal department) involved in the Data Protection Program and review the quality of their related tasks
• Identify gaps between data processing and PwC standards when performing data protection assessments (risk analysis, TIA, DPIA, LIA)
• Assist the Data Protection Manager to identify, inventory and assess personal data processing, associated supporting assets and applicable governance measures
• Conduct interviews, audits and surveys with internal owners (business and IT) and/or external counterparts to assess compliance and suggest recommendations
• Assist with remediation of control deficiencies and gaps identified during reviews
• Seek solutions, implement and follow up on technical and organizational measures to reduce risks and ensure compliance
• Carry out technology watch and robust tool testing
• Collaborate closely with IT, Data Office, Project Managers, business (HR, Infrastructure, Finance, Lines of Services), Network Information Security and the Legal department
• Be accountable for the integrity, accuracy and timeliness of reporting to Supervisory Authorities and PwC (including the PwC Network)
• Maintain awareness of compliance changes that may affect PwC's environment
• Support education and training of PwC employees on their compliance responsibilities
• Participate in building and animating a community of Data Protection champions

What you'll need

• Master's degree in law, business, information technology, or any other relevant field
• 3 to 5 years of experience in a similar role
• Strong knowledge of data protection regulatory requirements (especially the GDPR) and ability to apply them to data governance and IT architecture
• Understanding of how PwC's organizational units operate
• Ability to quickly grasp PwC's projects related to data governance or quality (including those within the PwC Network)
• Deep comprehension of the data lifecycle and ability to act as a Business Analyst or Risk Analyst, engaging with operational teams, critically assessing their input, and modeling operational processes (BPM)
• Ability to interpret and actively contribute to PwC's policies and guidelines on data handling and IT security (including within the PwC Network)
• Foundational understanding of ISO 2700X and EBIOS, with a focus on risk analysis methodology
• Proficiency in computer applications (Excel, Word, PowerPoint) and familiarity with Windows environments (e.g., OS, SharePoint)
• Solid grasp of databases and applications
• Fluent communication in both English and French

Details

• Location: Luxembourg