Data Privacy Legal Counsel (28287)

The Opportunity

Location: Barcelona.

Mission: Provide, under the supervision of the Digital & Data Privacy Legal Director (DPO), legal support on data privacy matters, overseeing the organization’s data protection strategy and its implementation to ensure compliance with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), providing continued preventive legal advice and defending Puig’s interests in order to mitigate legal risks.

What you'll get to do

• Drafting, updating, review, negotiation and implementation of DPAs, JCAs, Privacy Policies (e.g. E-commerce, HHRR, CCTV, VTO, etc.), Procedures, Guidelines and Protocols (e.g. DSAR and Data Breaches management and response) to ensure data protection and privacy compliance across the organization.
• Manage and monitor the Privacy Framework (PBDD) of the organization, including the preparation, update and review (sometimes in coordination with external lawyers and other teams) of the corresponding RoPas, LIAs, DPIAs, data transfers, audits, etc. ensuring compliance with the applicable regulations and requirements and that mitigation strategies are in place.
• Provide expert advice to the different business partners in data privacy matters (obligations and risks) ensuring compliance with the applicable regulations and requirements and conducting audits and legal assessment on privacy risks.
• Develop a close partnership with different stakeholders, devote time understanding their challenges and to educate and train them on legal implications and seek an ongoing exchange of information with them. Design and deliver regular training programs and awareness campaigns to educate employees about data privacy and security. 
• Promote a culture of data protection and compliance throughout the organization.
• Assist the Digital & Data Privacy Legal Director in specific projects and with other legal matters as necessary. 

We'd love to meet you if you have

• Experience: Minimum experience of 7 years in data protection, privacy law and information security matters (carrying out the type of tasks described in Functions and Responsibilities), preferably some of them in large law firm. Experience as an in-house lawyer will be a plus.
• Education: Law degree. Specific subsequent education will be a plus (in particular, in Data Privacy).
• Languages: Proficiency in both Spanish and English professional use. French will be a plus.
• Specific Knowledge required: Required knowledge/experience in carrying out the type of tasks described in Functions and Responsibilities.
• Competencies: Flexible. Rigorous but resolutive (can-do-attitude). Business oriented, with initiative. Problem-solving and pragmatism. Ability to work both independently and as strong team player. The ideal candidate will have excellent organizational, communication, and strong management skills.

A few things you'll love about us