Data Protection Expert @HeyBlu

HeyBlu is a Romanian e-money licensed fintech company that aims to provide financial services to customers and merchants operating in e-commerce and digital space. Our vision is to become a reliable partner in everyday shopping experience of the customers extending their purchasing power in easy and convenient way and helping e-commerce merchants to grow their business by building a diversified financing proposition for retail and SME clients.

Being a part of eMAG Group, the largest e-commerce group in Romania, HeyBlu is focusing on building financial offering for customers and merchants operating withing eMAG ecosystem by implementing “embedded finance” concept. As part of the Prosus group, we share the same purpose: „Improving everyday life for billions of people through technology”. In HeyBlu Team we build entrepreneurial, results-driven, agile, and collaborative culture based on our core values that we share accross the group: ownership, accountability, innovation, adaptability and customer focus.

Data Protection Expert will be responsible for supporting the effective management of HeyBlu Data Protection framework, implementing all aspects of data protection strategy and for providing expert advice, guidance and oversight within the organization on data protection related external/ internal events to effectively mitigate data protection risks.

This role will involve regular interactions with all functions within the organization which undertake or influence the processing of personal data including HR, Technology, Product & Business Development, Marketing, Risk, Compliance, Finance, Operations teams.

What you’ll have to do:

• Provide expert advice and consultancy on the applicable obligations related to processing of personal data, as per the applicable laws and GDPR requirements.
• Develop and maintain comprehensive internal data protection policies and procedures, consistent with regulatory requirements and group strategy.
• Ensure assistance when data protection rights are exercised by various individuals in relation to HeyBlu.
• Review and negotiate, as needed, commercial agreements and contracts, including DPAs with data processors.
• Ensure support and input to the business teams’ representatives when performing data protection impact analysis and balancing tests and monitors the implementation of the agreed actions.
• Provide support and input for the deployment of internal trainings and awareness campaigns in order to ensure an adequate level of privacy knowledge and awareness.
• Participate in the implementation of internal projects and issues concrete recommendations to ensure their compliance with data protection requirements (including when conducting DPIAs, TIAs, LIAs).
• Manage crisis situations related to personal data breaches, in coordination with other relevant functions and provide support and review for assessing risks.
• Monitor the documentation of processing activities (including reflection in the Records of the processing activities).
• Support the identification of the impact of and the coordination of responses to law and regulatory changes, internal & external audit reports and monitoring the follow-up on the regulatory issue solving.

How we’d like you to be:

• With bachelor’s degree, preferably in law, economics, computer science or related fields.
• With 4+ experience in a data protection role or similar position (compliance, IT risk, legal, internal control) with previous exposure to privacy in the financial services/fintech.
• With solid knowledge and understanding of data protection regulations (especially GDPR), and practices in the financial services sector. Data protection certification (e.g.: CIPP/E, CIPM, CIPT) would be an advantage.
• With good understanding of IT and security systems and digital challenges, as well as the needs of the business.
• With effective communication and presentation in English, analytical and attention to details skills.
• With ability to work well independently and collaboratively.
• With curiosity and genuine interest in new technologies and how they intersect with privacy.
• With desire to learn continuously and confortable working in a fast-paced environment.

Curious to find out more about the next step in your career? Apply now and if your experience is relevant for the role you wish, we will give you a call for more details!