Mission
The position will be a GDPR & Compliance role and will form part of the Legal Department of Omoda Motors Spain, S.L.U., reporting directly to the Head of Legal. The role will also maintain a reporting line to the European Headquarters and an additional functional reporting line to the China Headquarters.
Key Responsibilities
- Monitor and ensure compliance with GDPR, local data protection regulations, and internal company policies.
- Support the implementation, maintenance, and continuous improvement of the Company's Compliance Program.
- Provide ongoing guidance to business units in the development of their initiatives and day-to-day activities involving the processing of personal data and new technologies.
- Draft, manage and update data protection documentation, including Records of Processing Activities (RoPA), Data Processing Agreements (DPAs), agreements with third parties, legal reports, policies, guidelines, privacy notices, DISCLAIMERS and procedures.
- Conduct compliance risk assessments, data protection risk assessments and Data Protection Impact Assessments (DPIAs),
proposing appropriate mitigation measures where necessary.
- Review data protection and compliance aspects of new suppliers, including the assessment of technical and organisational security measures.
- Management of security breaches and risks, and implementation of controls.
- Coordinate responses to data subject requests and support investigations related to privacy matters.
- Deliver GDPR and Compliance training sessions to employees and promote awareness across the organization.
- Collaboration with the integral legal/compliance team in China and Europe on the implementation of GDPR and Compliance standards.
- Manage and support internal and external audits, ensuring GDPR and Compliance requirements are properly documented and maintained.
Requirements
- Bachelor's Degree in Law and Master's Degree in Legal Practice.
- Between 3-5 years of experience in Data Protection and Complian