Senior Data Protection Analyst (GBTO) - Innovation / Project / Organization - Warsaw, Poland
Posted 1 week ago by SOCIETE GENERALE
Negotiable
Undetermined
Hybrid
Warsaw, Poland
Summary: The Senior Data Protection Analyst role within the Data Management Office at Société Générale focuses on ensuring GDPR compliance and effective Data Record Management (DRM) across wholesale banking activities. The position involves implementing data protection strategies, managing risks related to personal data, and supporting compliance reporting. The analyst will also engage in cross-functional project management and promote data protection awareness within the organization. This role is based in Warsaw, Poland, and offers a hybrid working arrangement.
Key Responsibilities:
- Ensure operational compliance with GDPR and Schrems II requirements
- Maintain and update the personal data processing register
- Analyze risks related to personal data usage and cross-border data transfers
- Support the implementation and review of Standard Contractual Clauses (SCCs)
- Review and support contractual clauses related to data privacy
- Facilitate permanent supervision controls and contribute to GDPR compliance reporting
- Support GDPR correspondents in European entities and subsidiaries
- Promote awareness and training on data protection topics
- Contribute to "Privacy by Design" and "Privacy by Default" integration in new projects
- Represent GBTO in Group-level DRM initiatives and implement action plans
- Maintain and update the local data retention repository
- Identify applications eligible for data purging and contribute to the annual DRM compliance roadmap
- Provide expertise and support to IT teams on data retention and archiving rules
- Support new projects to ensure compliance with DRM requirements
- Contribute to DRM tooling in alignment with Group solutions and local needs
- Promote DRM culture within GBTO through training and awareness sessions
Key Skills:
- Minimum of 8 years of experience in cross-functional project management
- Proven experience in GDPR compliance, data governance, or privacy-related initiatives
- Familiarity with Schrems II, SCCs, and international data transfer regulations
- Strong stakeholder management skills
- Fluency in English with excellent communication skills
- Experience with IT systems, cybersecurity, cloud environments, and data lifecycle management is an asset
Salary (Rate): undetermined
City: Warsaw
Country: Poland
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: Other
Responsibilities
As part of the Data Management Office within Global Banking Technology and Operations (GBTO), you will contribute to 2 major regulatory and operational domains: GDPR compliance and Data Record Management (DRM). You will support the implementation of data protection strategies and lifecycle management across wholesale banking activities, ensuring alignment with Group policies and European or local regulations.
Your future scope of responsibility will cover:
GDPR & Data Privacy Compliance
- Ensure operational compliance with the European General Data Protection Regulation (GDPR) and Schrems II requirements
- Maintain and update the personal data processing register
- Analyze risks related to personal data usage and cross-border data transfers
- Support the implementation and review of Standard Contractual Clauses (SCCs) with external and internal partners
- Review and support contractual clauses related to data privacy
- Facilitate permanent supervision controls and contribute to GDPR compliance reporting
- Support GDPR correspondents in European entities and subsidiaries subject to local data protection laws
- Promote awareness and training on data protection topics (procedures, documentation, intranet content)
- Contribute to the "Privacy by Design" and "Privacy by Default" integration in new projects
Data Record Management (DRM)
- Represent GBTO in Group-level DRM initiatives and implement action plans aligned with SG's data governance policies
- Maintain and update the local data retention repository
- Identify applications eligible for data purging and contribute to the annual DRM compliance roadmap
- Provide expertise and support to IT teams on data retention and archiving rules (e.g., decommissioning, migration)
- Support new projects to ensure compliance with DRM requirements
- Contribute to DRM tooling in alignment with Group solutions and local needs
- Promote DRM culture within GBTO through training and awareness sessions for Data Champions
- You have a minimum of 8 years of experience in cross-functional project management, ideally within banking or investment banking environments
- You bring proven experience in GDPR compliance, data governance, or privacy-related initiatives
- You are familiar with Schrems II, Standard Contractual Clauses (SCCs), and international data transfer regulations
- You demonstrate strong stakeholder management skills and can effectively engage across multiple organizational levels
- You are fluent in English and possess excellent communication skills, with the ability to clearly explain complex and technical topics
- Experience with IT systems, cybersecurity, cloud environments, and data lifecycle management is considered an asset
Your future with Societe Generale will include:
- Work in a pleasant atmosphere as part of an international team in a brand-new office in the centre of Warsaw, designed with facilities for people with disabilities
- An active role in an international structure and the opportunity for growth
- Access to educational platforms and language courses
- Stability
- Competitive salary based on seniority and skills
- Support in quick adaptation in the company
- Extraordinary health package with extensive dental care
- Hybrid work (2 days per week from home) and one-time bonus for home office equipment
- Even more benefits such as meal allowance, holiday fund, sports card and insurance
*Please be informed that we will be accepting only resumes in English.
Business insight
At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you're joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.