Data Privacy Lead

Lead Privacy by Design for Connected Products and Digital Services

Take ownership of and strengthen an established privacy programme within a dynamic environment focused on connected products, IoT, and cloud services. This role requires a strategic approach to embedding privacy into the core of digital innovation, ensuring robust compliance and technical excellence.

Key Responsibilities

• Lead Privacy by Design activities across connected products, IoT, and cloud services.
• Review and update existing data-flow maps, processing records, and privacy controls within the Secure Development Lifecycle.
• Translate GDPR, EU Data Act, and relevant AI obligations into clear technical requirements for Engineering teams.
• Lead privacy assessments and DPIAs, define mitigations, and maintain supporting evidence.
• Challenge unnecessary data collection and review product and cloud architectures.
• Support retention, deletion, data-subject rights, supplier assessments, and international-transfer reviews.
• Review personal-data use in AI and analytics applications.
• Coordinate with Engineering, Product Management, Cybersecurity, Legal, and the DPO.
• Maintain privacy governance, action tracking, training materials, and handover documentation.

Required Profile

• At least 7 years of privacy or data-protection experience, including 3 years leading implementation for digital products or services.
• Experience with connected products, IoT, cloud platforms, or similarly data-intensive environments.
• Strong knowledge of GDPR, DPIAs, and Privacy by Design.
• Ability to understand and challenge technical architectures and convert legal obligations into actionable engineering requirements.
• Experience working autonomously across legal, technical, and business teams.
• Experience with the EU Data Act, CNIL guidance, ISO/IEC 27701, AI-related processing, e-mobility, energy systems, or industrial IoT is an advantage.

Initial Priorities

During the first three months, the focus will be on:

• Taking ownership of the existing privacy programme.
• Reviewing and consolidating current data-processing and data-flow documentation.
• Assessing privacy controls within the product development lifecycle.
• Identifying and prioritising improvements, with particular focus on GDPR and the EU Data Act.