At Ayesa Digital we grow with you!
Thanks to their talent, we continue to expand;
Ayesa Digital is currently participating i n high-impact European Union projec ts designed to address major European challenges and drive science and innovation. These are strategic technological projects based on collaborative initiatives that stand out for their international focus and a strong commitment to socially-oriented results.
We are looking to incorporate a Senior Data Protection Specialist (Governance, Risk & Compliance). Ensure that IT operations comply with EU data protection and privacy standards, laws and regulations
Support the design, implementation, auditing and testing of controls to ensure data protection compliance
Provide expert advice on data protection matters, particularly in the context of personal data processing activities
Conduct Privacy Impact Assessments (DPIAs) and support risk analysis activities
Draft and review Records of Processing Activities (RoPAs), privacy notices and related documentation
Develop, maintain and promote data privacy policies, procedures and awareness initiatives across the organisation
Act as a key point of contact for data protection queries, incidents and complaints
Ensure stakeholders (data owners, controllers, processors and partners) understand their data protection obligations
Monitor audit activities and contribute to data protection training programs
Collaborate with internal teams (IT, cybersecurity, operations, legal) and external stakeholders, including authorities
Contribute to the continuous improvement of organisational data protection strategy, policies and processes
Manage legal aspects of information security and third-party data protection compliance
Minimum English level: At least 5 years of relevant professional experience in IT/data protection, with a minimum of 4 years in a similar role
At least 5 years of experience in personal data protection compliance in ICT, EU institutions, public sector or similar environments
At least 2 years of experience analysing technical environments (data flows, access management, logs, SIEM, hosting, transfers, subprocessors, etc.)
At least 3 recognised certifications such as CISA, CISM, CRISC, CISSP-ISSMP, CAP, ISO 27001 Lead Implementer/Auditor, ISO 27005 Risk Manager, GIAC certifications or equivalent
Excellent knowledge of EU data protection legislation and regulatory frameworks
Strong understanding of data protection standards, policies and best practices
Solid background in IT operations, service delivery and compliance frameworks
Ability to align business strategy with legal and regulatory requirements
Proven capability to design and implement data protection policies and procedures
Strong ethical mindset and ability to adapt to regulatory changes
Team-oriented approach with strong collaboration skills
Prestigious projects within European institutions.
Continuous support from a team of experts in EU projects.
If you are ambitious, enthusiastic, and seeking a new professional challenge in international projects with real-world impact, this is the place for you!
In accordance with Organic Law 3/2007 of March 22, the company is committed to promoting the defense and effective application of the principle of equality between men and women, preventing any type of labor discrimination based on sex, and guaranteeing equal entry opportunities. Furthermore, we promote diversity and reject any discrimination based on race, gender, functional diversity, religion, sexual orientation, gender identity, or any other personal or social condition, striving to build an inclusive and enriching environment.