Data Risk Review Expert

Job description

Can’t wait to make an impact on the world? You’re not alone. Join us in driving progress in the working world and beyond. Your journey with us The Team and the Role Deloitte’s Technology Operating Model (TOM) is a framework of standards (controls) and guidance used to confirm that all Deloitte’s technology assets and solutions are built to run, operate, and scale in a safe and predictable manner. One important pilar of the framework if Confidentiality and Privacy. A Confidentiality and Privacy Assessment must be completed for each technology asset that will collect, access, store, or process Personal Data and/or Confidential Information. As Data Risk Review Expert, you will be responsible for assessing and identifying, data-related risks associated with software applications used within Deloitte. You will work closely with cross-functional teams to ensure that applications comply with data protection regulations, security standards, and best practices, thereby safeguarding sensitive data and minimizing data-related vulnerabilities. Key Responsibilities: Application Data Risk Assessment: Conduct in-depth assessments of data-related risks associated with applications. Identify vulnerabilities, threats, and weaknesses in applications and formulate pragmatic, achievable and state-of-art mitigation measures. Prioritize risks based on their potential impact on data security and integrity. Review technical documentation (data flow diagrams, solution designs) to make sound judgements regarding data protection risks. Data Compliance for Applications: Ensure that applications comply with relevant European Digital Regulations (e.g., GDPR, EU AI Act) and industry-specific standards. Enforce data governance policies and procedures specific to application data. Monitor, report and adapt to the evolution of digital regulations, guidelines and relevant case law. Security Controls for Applications: Review and enhance application security measures to protect data against unauthorized access, breaches, and data loss. Reporting and Documentation: Prepare and present reports on application data risk assessments, findings, and mitigation efforts to relevant stakeholders, (legal analysis, escalations, etc.). Update application records with data risk management activities (e.g. Risk Register). Vendor Application Risk Management: Assess and manage data risks associated with third-party applications and software vendors. Ensure vendor applications adhere to data security and privacy standards. Let's talk about you Essentials: You have 3 to 5 years of working experience in data protection. Knowledge and experience with the EU AI Act are a must. You are a real team-player but also possess strong self-management skills and feel comfortable to work independently with minimal supervision. You have experience in working closely with senior stakeholders and the ability to interact confidently with people at all levels and backgrounds within the firm (often remotely). You are able to convert legal and technical specifications into business-friendly language. You are comfortable with working on multiple, often complex projects at the same time. You are eager to learn and research about new technologies, trends and how they affect legal and compliance obligations. You are proactive, risk-sensitive, and solution-oriented. You have excellent command of English, both written and spoken. Desirables: CIPP/E, CIPT (or similar) qualification, with excellent understanding of EU Data Protection legislation and ability to apply this within the context of Technology assessments. Prior experience in client service and/or project management. Who is Deloitte? We provide industry-leading audit and assurance, tax and legal, consulting and related services. We are committed to driving innovation across offerings to help our clients address their challenges, while giving our professionals opportunities to learn and grow in this era of transformation. In Belgium, +5000 dedicated professionals active in +10 offices, take great pride in bringing multidisciplinary expertise to a wide variety of clients, from national and international companies, small, fast-growing and large organizations to public institutions and governmental authorities. Why Deloitte? Be the true you! We foster diversity and inclusion and encourage you to bring your authentic self to work. Explore, question and collaborate while building a career that inspires and energises you. Never stop growing! Diversity of thought makes us stronger. At Deloitte, we tailor a personalized learning experience, offering you the opportunity to grow at your own pace and achieve maximum impact. We practice what we preach! As a Purpose-led organisation, at the heart of everything we do is a set of timeless principles and unifying values . Life looks different for each of us, so we created a varied benefits package that you can tap into: My Benefits My Choice , a flexible rewards plan tailored to your lifestyle and priorities Sustainable transport options offered by Mobility@Deloitte Flexible work arrangements for all and initiatives supported by Parents & Caregivers @Deloitte Wellbeing tips and activities powered by Energise@Deloitte Topped off with other health benefits and insurance opportunities Empowering our employees with flexible work arrangements remains essential in today's reality: Hybrid workplace: combination of home office and on-site (+10 offices in Belgium or client's premises). Part-time employment: all our jobs are open to full-time or part-time work under a 90% or 80% regime. Join us to make an impact together! Apply now! #LI-OS1