Data Protection and Information Security Coordinator, HelloBetter

• 3+ work experience in a data protection or information security role, with a strong understanding of GDPR
• Demonstrable experience in managing and maintaining a data protection management system and/or an information security management system, including extensive experience managing audits
• A recognised certification in data protection or information security
• Experience in handling data subject requests and managing incidents
• Excellent organisational and project management skills, with the ability to manage multiple tasks and deadlines effectively
• Strong communication and interpersonal skills, with the ability to collaborate effectively with both technical and non-technical stakeholders
• A proactive and solution-oriented mindset, with a keen eye for detail
• Fluency in English and German

Desirable

• The Data Protection and Information Security Coordinator will be a central figure in our efforts to maintain and enhance our data protection and information security posture
• This role is responsible for the operational management of our data protection and information security management systems, ensuring compliance with GDPR, DiGAV and other relevant regulations
• The ideal candidate will be a proactive and organised individual with a strong understanding of data privacy principles and a commitment to fostering a culture of security within the organisation
• Oversee and maintain the data protection management system, including retention policies, Data Protection Impact Assessments, Technical and Organisational Measures, and records of processing activities
• Drive data protection certification process pursuant to Article 42 GDPR (once available)
• Manage and respond to data subject requests received through various channels, ensuring timely and accurate resolution
• Handle and coordinate responses to requests from data protection authorities
• Serve as a key point of contact for our external Data Protection Officer
• Manage and monitor the ISMS (ISO27001), including supplier management, incident management, and risk management
• Drive the implementation of information security norms and standards throughout the organisation
• Organise, execute, and follow up on internal and external audits, including the implementation of opportunities for improvement
• Monitor and report on the effectiveness of the ISMS and drive continuous improvement
• Serve as a key point of contact for our external Information Security Officer
• Monitor legal and regulatory developments in data privacy and information security, providing updates and recommendations to the management team
• Develop, implement, improve and monitor data privacy and information security training programs for all employees
• Contribute to quarterly leadership newsletter with a focus on GDPR and other relevant topics
• Contribute to various internal projects related to data protection and information security
• Collaborate with cross-functional teams to ensure that data protection and information security are embedded in all new projects and initiatives
• Participate in relevant industry groups and forums to stay abreast of best practices and emerging trends
• Reports to: Philip Ihde, Chief Operating Officer

• 1. Screening Interview with People team (30 min)
• 2. Take-home Case Study (2 hours)
• 3. Case Study & Technical Interview with the Legal team (60 min)
• 4. Hiring Manager Interview with Philip, Chief Operating Officer (60 min)
• 5. Offer Talk (15 min)