Associate Division Counsel, Hoofddorp

Position Overview Strategic privacy leader responsible for overseeing the Company's Data Protection Compliance Program. Develops governance frameworks, procedures, and guidance to ensure global compliance. Serves as the escalation point and subject matter expert for data protection matters, coordinating with business functions to embed privacy compliance. Not an operational role; focused on governance, strategy, risk management, and advisory.

Core Responsibilities

Oversee Data Protection Compliance Program implementation; develop procedures, templates, and guidance documents; conduct periodic effectiveness reviews

Monitor global regulatory developments; conduct gap analyses; provide expert advisory on complex privacy matters (transfers, lawful bases, DPIAs, legitimate interest assessments)

Oversee data mapping, record-keeping, and risk assessments; support privacy‑by‑design in products and systems

Design and deliver training programs; identify, train, and support business function compliance coordinators

Act as escalation point for privacy questions and incidents; coordinate across business units; collaborate with InfoSec, IT, Legal, HR, Procurement, R&D

Develop breach response procedures; oversee incident investigations and regulatory notifications; coordinate with external legal experts as appropriate

Manage third‑party processor assessments; develop data subject request procedures; oversee privacy management tools (OneTrust or similar); support automation of privacy compliance workflows

Required Qualifications

Law degree (JD, LLB) and privacy certification (CIPP/E, CIPP/US, or equivalent); CIPM strongly preferred

5‑7 years privacy experience including GDPR application; policy/procedure development; data mapping; breach response; DSAR procedures; DPIAs and legitimate interest assessments; gap analyses; regulatory monitoring; privacy management platforms (OneTrust)

Technology sector experience strongly preferred; SaaS/B2B contexts; controller and processor roles; sensitive data (criminal records, biometric, health)

Deep knowledge of global privacy frameworks (GDPR); data protection principles; privacy‑by‑design; international transfers (SCCs, BCRs); cookie consent and tracking

Strong communication skills (explain complex legal concepts to non‑legal audiences); analytical and risk assessment capabilities; project management; strategic thinking balanced with pragmatism

Preferred Qualifications

CIPT certification; public safety/government client experience; AI/ML governance familiarity; regulatory investigation experience; Big Law or tech company in‑house background; cloud architecture knowledge (AWS, Azure, GCP); privacy‑enhancing technologies; program‑building experience; SQL/technical documentation skills

#J-18808-Ljbffr