At IKEA, you're welcome no matter where you come from, what you believe, and what you look like. We don't even care how you have furnished your home. We're interested in you simply because you're you. Our different views, backgrounds, and personalities make us better understand our customers, give us more fun at work and spark more and better ideas. Perhaps your unique take on something could lead to a great idea that creates a better everyday life for many people. Requirements for the DPO role: • Master's degree in law, business, IT or similar and at least 6 years of relevant professional experience providing data protection advice and developing data protection programmes and frameworks, preferably in a large corporation operating across multiple jurisdictions • Detailed working knowledge of the EU data protection legislation, data protection authorities' decisions and guidance and national and EU-level case law • Passion for data privacy, data ethics and technology and for upholding a fundamental right to data protection in the business context • Extensive practical experience in embedding privacy by design concepts in the business and technological processes, advising on cookies and other tracking technologies, privacy controls design, implementation and monitoring • Attention to detail and strong legal drafting skills that can be used in a commercial setting with business stakeholders, as well as in a public setting with data subjects and data protection authorities • Exceptional interpersonal and stakeholder management skills; ability to communicate clearly and convincingly and to present complex concepts in an accessible manner to technical and non-technical audiences • Professional certifications, including Certified Information Privacy Professional EU (CIPP/E), Certified Information Privacy Manager (CIPM) and Artificial Intelligence Governance Professional (AIGP) or similar Nice to have: • Experience implementing and working with Digital Compliance and Consumer Protection legislation (e.g. EU AI Act, Digital Service Act, Accessibility Act, Omnibus Directive, etc.) and Cyber Security Laws (e.g. NIS2, Cyber Resilience Act, etc.) • Experience working with Digital, AdTech, MarTech, eCommerce, consent management and data preference solutions • Experience working in retail or manufacturing industry • Good understanding of AI governance, data management and cybersecurity disciplines and knowledge of the EU digital strategy package as well as industry standards, such as ISO27701, ISO27001, SOC, NIST, etc. • Experience implementing data protection programs in the US, China and India
Your responsibilitiesTasks and responsibilities of the DPO role: • Inform, advise, and support the assigned Ingka legal entities and co-workers regarding their obligations under the relevant data protection and privacy laws • Monitor the execution of and provide authoritative advice regarding Data Protection Impact Assessments (DPIA) and the associated privacy assessment processes, Records of Processing Activities (ROPA), individual rights requests, data breaches, third parties and data processing agreements • Perform compliance verification activities and reviews, identify gaps in the implementation of data privacy controls and support the development of appropriate training and awareness, guidance and process improvements • Prepare clear and effective reporting to the senior management, including the boards of the assigned legal entities • Act as the principal point of liaison for Ingka Group and assigned legal entities with supervisory authorities and data subjects in the relevant jurisdictions
Together as a teamYou will join a seasoned Global DPO team passionate about data protection, fundamental rights and technology. As a team, we value togetherness, collaboration and creativity. You will also be working closely with our global and local Cyber Security & Privacy, Business Risk & Compliance, Digital, Media & Marketing, People & Culture and other teams across Ingka Group.