Data Protection Officer - CTBC

Job description

Company Description Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2021, Continental generated sales of €33.8 billion and currently employs more than 190,000 people in 58 countries and markets. On October 8, 2021, the company celebrated its 150th anniversary. The ContiTech group sector develops and manufactures, for example, cross-material, environmentally friendly and intelligent products and systems for the automotive industry, railway engineering, mining, agriculture and other key industries. Guided by the vision of “smart and sustainable solutions beyond rubber,” the group sector draws on its long-standing knowledge of the industry and materials to open up new business opportunities by combining various materials with electronic components and individual services. Job Description In your role as Data Protection Officer (m/f/divers), you will serve as the formally appointed DPO for ContiTech Thermopol Romania S.R.L. in accordance with GDPR Articles 37–39 and Romanian Law No. 190/2018. You will act as the central contact point for the Romanian supervisory authority (ANSPDCP), data subjects, and internal stakeholders on all matters relating to the processing and protection of personal data. In addition to the statutory DPO mandate, you will fulfil the role of Compliance Coordinator, serving as the local liaison to the central Commercial and Data Compliance function of ContiTech. This combined position ensures both regulatory compliance and effective corporate governance. In detail, you can expect the following tasks and responsibilities: Informing and advising the controller and its employees on their obligations under GDPR, Romanian Law No. 190/2018, and Binding Corporate Rules; Monitoring compliance with applicable data protection legislation and internal policies, including the Data Protection Manual; Serving as the primary contact point for ANSPDCP and handling all communications with the supervisory authority; Coordinating and advising on data protection impact assessments (DPIAs) for new or modified processing activities; Maintaining and updating the Records of Processing Activities (RoPA) in cooperation with business process owners; Managing the intake, verification, routing, and resolution of data subject requests (access, erasure, rectification, restriction); Leading the internal response to data protection incidents and breaches, including investigation, documentation, escalation, and — where required — notification to ANSPDCP and affected data subjects; Supporting central Data Compliance and Internal Audit in the planning and execution of audits and compliance reviews; Coordinating the local rollout and adoption of corporate compliance policies, procedures, and standards; Designing, organising, and delivering data protection training and awareness programmes for employees and management; Preparing regular compliance reports and KPIs for local leadership and central Data Compliance; Advising business owners on the data protection-compliant implementation of business transactions, projects, and vendor relationships, including cross-border data transfers; Monitoring changes in Romanian and EU data protection legislation and recommending necessary actions to management. Qualifications Academic degree in law with demonstrated expertise in data protection law; additional qualification or certification in data protection (e.g. CIPP/E, CIPM, or equivalent) is a strong advantage; Minimum 3 years of professional experience in a compliance, legal, audit, or data protection function, with at least 2 years of hands-on experience applying the GDPR; Sound knowledge of Romanian data protection legislation, in particular Law No. 190/2018 and ANSPDCP regulatory practice; Experience in conducting or coordinating data protection impact assessments, managing records of processing activities, and handling data subject requests; Familiarity with data protection management systems, IT security principles, and information governance frameworks; Experience with forward-looking topics such as cyber security, cloud computing, big data, and artificial intelligence is desirable; Business fluent Romanian and English language skills (written and spoken); knowledge of German is an advantage; Strong communication and advisory skills, with the ability to interact effectively with stakeholders at all organisational levels, including senior leadership and regulatory authorities; High level of integrity and the ability to operate independently, as required by GDPR Article 38(3), free from instructions regarding the exercise of DPO tasks; Proactive, structured, and self-organised way of working, with the ability to manage multiple priorities and deadlines; Willingness to travel. Applications from severely handicapped people are welcome. Additional Information What we offer: The 13-th salary – Paid once a year, in December; Meal tickets - With a value of 40 Ron; Hybrid schedule – Work-life balance is important, so we offer a flexible schedule. Please agree on this with your superior; Private Health Insurance – Health is the most important, so we offer you a medical subscription through Signal Iduna; Referral bonuses - We encourage colleagues to refer new candidates to us and, at the same time, to get the chance to receive a bonus; Bookster - Feed your body and your mind. You can borrow books and you’ll receive them at the office; Sports benefits - It’s important to stay active, so we offer you the 7Card; Discounts at our partners – We collaborate with different vendors, and we receive discounts for various products/ services like rubbers, restaurants, kindergartens, etc; System for Rewarding Improvement Ideas – We have an internal improvement program (Continental Idea Management) that gives you the opportunity to come up with ideas and to be honored with an attractive bonus (this is established by the CIM team according to your improvement idea); Happy days – If you or your child is getting married, or you become a parent, you receive some extra free days; Life events celebration - If your family is growing, we praise your newborn with a bonus; Unfortunate events - In case of unhappy events in your life, we support you by offering you free days and financial support (handled on a case-by-case basis); Extra vacation days – You begin with 22 vacation days/year, and starting with the 3rd year with us, we offer you 1 more day of vacation and, afterward from 2 to 2 years you’ll get one more extra day (the maximum you can achieve is 27); Transport from the Timisoara area – You can choose to come with the bus provided by the company if you’ll work from the plant location/office; Professional development - Many opportunities to develop yourself within the company; Diversity and multicultural mindset - We encourage you to join us no matter who, where, or what you are. We have colleagues from different nations and a variety of languages are poken in our company. Ready to drive with Continental? Take the first step and fill in the online application.