Senior Governance Risk and Compliance Expert

Quality & Reliability S.A.

. Ensure IT operations comply with data privacy laws, regulations and standards .

Posted 11/4/2026full-timeWarsaw • PolandSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in data protection compliance, including conducting DPIAs and maintaining RoPAs, while effectively communicating data privacy policies and fostering a culture of data protection within organizations. Possesses strong analytical skills to identify compliance gaps and propose actionable solutions in alignment with EU data protection legislation.

Highest-signal resume keywords

Data Protection CompliancePrivacy Impact Assessments (DPIAs)Records of Processing Activities (RoPAs)EU Data Protection LegislationCISA, CISM, ISO 27001 Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Processing AgreementsTransfer Impact AssessmentsData MappingTechnical DocumentationAccess Rights Management

Soft Skills

Strong Communication SkillsAnalytical Thinking

Tools & Technologies

Logs/SIEM ExportsData Flows Management

Certifications & Qualifications

CISACISMISO 27001 Lead ImplementerISO 27001 Lead AuditorCISSP-ISSMP

Industry Keywords

GRC RoleICT EnvironmentEU Institutional EnvironmentData Protection StrategyRegulatory Frameworks

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Ensure IT operations comply with data privacy laws, regulations and standards
Conduct privacy impact assessments (DPIAs) and maintain records of processing activities (RoPAs)
Identify compliance gaps and propose practical countermeasures
Advise on data protection matters, particularly personal data processing
Develop, maintain and communicate data privacy policies and procedures
Deliver staff awareness training to foster a culture of data protection
Act as the contact point for queries and complaints related to data processing
Cooperate with authorities and professional groups on data protection matters
Manage legal aspects of information security and third-party relations

Requirements

What you’ll need

At least 5+ years of IT experience and 4+ years in a GRC role
Master’s degree in Computer Science, Engineering or a related technical field
Hands-on data protection compliance experience in an ICT, EU institutional, or public-sector environment
Experience in preparing or reviewing RoPAs, DPIAs, Data Processing Agreements, and Transfer Impact Assessments, including data mapping and input validation from technical owners
Experience in documenting technical arrangements relevant to data protection: access rights, privileged access, logs/SIEM exports, retention, data flows, processors and subprocessors
Deep knowledge of EU data protection legislation, regulatory frameworks, and privacy standards
Ability to work with incomplete or inconsistent ICT information, distinguishing facts from assumptions, identifying gaps and structuring clear follow-up
Strong communication skills, able to explain data protection topics to both technical and non-technical audiences
English C1 level certification
At least 3 certifications from the following: CISA, CISM, GSNA, GCCC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager, CAP, CRISC, CISSP-ISSMP, GIAC Certified ISO-27000 Specialist, or internationally recognised equivalent subject to EU-I acceptance
Prior experience in an EU institutional environment (nice to have)
Familiarity with the practical implications of evolving EU legal frameworks on organisational data protection strategy (nice to have)
Experience collaborating across multidisciplinary teams including cybersecurity, SOC, and architecture functions (nice to have)