Group Data Protection Officer (DPO)

NCC is working towards becoming an information driven construction company and is viewing data privacy as instrumental in this journey. NCC is now looking for a Data Protection Officer for the Group. The DPO will lead, monitor and support the organizational compliance with the GDPR requirements. In this role, the DPO will report to the Group Head of Compliance.

 

Your role
The key responsibilities of the role are as follows:


• Oversee the NCC Group’s data protection strategy to ensure compliance with GDPR requirements
• Inform, advise and co-ordinate GDPR activities with other information risk and governance leads e.g. Legal, IT, Security, Business Areas, etc.
• Monitor compliance with GDPR and report such compliance to NCC Group Management
• Educate the company and its employees about compliance, training staff involved in data processing, and conducting regular security audits.
• Continue to write, develop, implement and enforce suitable and relevant data protection steering and guiding documents and ensure it is reviewed on an annual basis
• Provide information and guidance on the processing of all personal information
• Be contact person and co-ordinate the support and responds to all requests for information about data privacy
• Work closely with the information owners and support them in creating an information landscape and information flow maps of personal information
• Undertake and organize systematic data protection compliance audits in accordance with GDPR
• Lead and assist with investigations into complaints and reports about breaches of the act and undertake reporting/remedial action as required.
• Ensure a log of any incidents and provide remedial recommendations and actions
• Interpret and provide guidance to the organization on forthcoming and actual changes to relevant legislation on GDPR and other global privacy mandates
• Promote data protection awareness throughout the organization by providing training, communication and written procedures that are widely disseminated and made available to all staff and branch officials
• Ensure risk assessments by Data Protection Impact Assessment (DPIA) for applicable processes and systems in Business Areas and Group Functions
• Secure maintenance of proven compliance in agreements, records, processes and systems
• Monitor third party management and all Controller-Processor relationships
• Provide advice in relation to remediation actions in processes and systems from the DPIA: s
• Co-operate with the supervisory authority
• As Group Data Protection Officer act as the contact person for the supervisory authority

 
 Your experience and qualifications
To be successful in this role, we believe you possess expert knowledge of data protection law and practices and have 5+ years of relevant work experience from the Data Protection area and information security at a larger multinational organization, with a proven track record from both acting at an operative level and in an advising role to the organization as well as in IT.

We believe that you are motivated by proactive work together with our Business Areas and Group Functions, and by creating ways to present findings and understanding of complex GDPR matters from non-technical stakeholders within the Business Areas and Group Functions.

 

 
Basic qualifications are:

• Swedish and English fluency is required.
• Expert knowledge of European data protection laws and practices, particularly GDPR
• Advanced knowledge of IT systems, processes, information governance and information security practices
• Ability to communicate with internal stakeholders, data protection authorities, and customers
• Knowledge and experience in compliance management

 

Highly merited qualifications are:

• Fluency in other languages, particularly Finnish or other Nordic language is preferred
• Experience in Management System implementation such as ISO 27001

 
Personal Qualities

• High level of integrity and objectively
• Experience in working at an operative level with Data Protection and change management
• Analytical strength and ability to use that strength in risk management processes and control framework
• Excellent in building relations and in communicating complex and technical issues to all levels within an organization

In this role we are looking for a person with leader qualities. You are structured, analytical with a good ability to work with others in teams. If you find energy in change, are open minded and like being given responsibility, maybe this position is the one for you.

 

Additional information
Some traveling is a natural part of the role.

 

We offer

NCC offers an opportunity to be a part of a dynamic organization with great opportunities for personal development. You will work in a company, which strives to be the forerunner in its industry, and you will be a member of a team with engaged and positive colleagues.
NCC's vision is to renew our industry and offer the best sustainable solutions. Our work is guided by our values; honesty, trust, respect and pioneering spirit.

 
 Are you interested?

This is a permanent position located in our head office in Solna, Sweden.
Please register your application and CV in English below. Selection is ongoing, so please apply as soon as possible but no later than 2020-10-16.

 

Questions?
For further information on this position, please contact HR Recruitment Specialist Karin Österman de Wall, karin.osterman.de.wall@ncc.se. 

 

Annonssäljare och säljare av rekryteringstjänster undanbedes kontakta NCC för detta uppdrag.