Data Protection Officer (DPO) for RETN Group
About the Role
RETN is seeking an experienced Data Protection Officer (DPO) to lead and oversee the company's data protection and privacy framework across its international telecommunications operations.
Headquartered in London and operating across multiple jurisdictions, the company processes significant volumes of personal, customer, employee, communications and operational data across a complex and highly regulated international environment.
The DPO will provide independent and expert advice to the business, monitor compliance with applicable data protection and privacy laws, and support the development of a consistent, risk-based global privacy framework.
The role requires a strong understanding of GDPR together with practical knowledge of international privacy regulations and the ability to translate regulatory requirements into commercially practical solutions.
Key Responsibilities
1. Global Data Protection Governance & Compliance
- Lead and continuously develop the company’s global data protection framework, ensuring compliance with GDPR across all operations.
- Monitor regulatory developments and assess their impact on the business.
- Provide independent, practical and risk-based data protection advice to management and business functions.
2. Data Protection Risk & DPIAs
- Oversee Data Protection Impact Assessments (DPIAs) and monitor implementation of required changes.
- Advise on data protection risks related to new technologies, including AI, analytics and data-driven initiatives.
3. Telecommunications & Customer Data Protection
- Provide privacy advice on telecommunications products, services and technologies, including the collection, use, retention and disclosure of customer data.
- Advise on data protection considerations relating to communications, traffic, usage and location data.
- Work with relevant company teams to identify and address data protection risks at an early stage.
4. International Data Transfers & Third Parties
- Oversee the company’s approach to international transfers of personal data and advise on appropriate safeguards and transfer mechanisms.
- Ensure third parties and suppliers meet data protection requirements.
5. Data Protection Breaches & Incidents
- Provide data protection and regulatory advice during personal data breaches and incidents.
- Advise on regulatory and individual notification requirements and support post-incident reviews and improvements.
6. Regulatory Liaison
- Act as the primary point of contact for relevant data protection authorities.
- Coordinate responses to regulatory inquiries, consultations and investigations.
7. Data Protection Training & Awareness
- Develop and deliver GDPR compliance training and awareness program.
- Promote a strong culture of responsible and compliant use of personal data across the organization.
8. Data Protection Risk & Global Coordination
- Maintain oversight of key data protection risks, remediation activities and compliance reporting.
- Report significant data protection risks and compliance matters to senior management and relevant governance bodies.
Requirements
- University degree in Law, Data Protection, Compliance, Risk Management, Information Security, Business Administration or a related discipline.
- Professional qualification such as CIPP, CIPM, CIPT, FIP or equivalent is highly desirable.
- Additional qualifications in cybersecurity, information security, risk or compliance are advantageous.
- 7+ years of relevant professional experience in data protection, privacy, legal, compliance, risk or a related field.
- Strong practical knowledge of GDPR.
- Experience working in a multinational organization with operations across multiple jurisdictions.
- Experience developing or managing privacy governance frameworks.
- Strong practical experience with DPIAs, data subject rights, data processing agreements, international transfers and privacy incident management.
- Experience working with technology, information security, data analytics or digital products.
- Experience in telecommunications, technology, digital services or another highly regulated/data-intensive industry is strongly preferred.
- Experience interacting with data protection authorities or supporting regulatory investigations is an advantage.
We Offer
- Employment in a large international company;
- A professional team and friendly working environment;
- Corporate events;
- Health insurance;
- Training and professional development opportunities;
- Opportunities to exchange experience with colleagues from other countries.