Data Privacy Specialist (CIO-2026-209-LD)

Introduction
As a Data Privacy Specialist, you will join the Office of Data Privacy (ODP) in the Office of the CIO. ODP is CERN’s independent and impartial centre of expertise in the area of data privacy. You will report to the Data Privacy Advisor, CERN’s Data Protection Officer, and will advise CERN Management as well as Data Subjects and External Entities involved in the Processing of Personal Data, on all issues related to the Organization’s data privacy protection.
Functions
Provide specialised legal and operational advice to ensure that CERN's processing of personal data complies with applicable data privacy protection requirements throughout the data lifecycle, including projects, contracts, risk assessments, data transfers, and data breach response, taking into account data protection implications of emerging technologies.
Manage or contribute to projects in the privacy and data protection field involving internal and external stakeholders (e.g. international data-sharing initiatives).
Advise on the relevant governance structures, policies, documentation, stakeholder engagement, and establish and maintain regulatory relationships necessary to support CERN's data privacy protection framework.
Ensure the effective exercise of data subject rights and the prompt handling of grievances and complaints.
Promote a strong culture of data privacy protection through communication, awareness campaigns, guidance materials, and targeted training for CERN personnel and stakeholders.
Oversee the effectiveness of CERN's data privacy protection framework, identify improvement opportunities, and ensure ongoing alignment with evolving regulatory expectations and recognised best practices.
Master's degree or equivalent relevant experience in the field of Law, Data Protection, Privacy, IT or a related field.
Holding a certification in the domain of data privacy protection (e.g. International Association of Privacy Professionals (IAPP), Certified Information Privacy Professional (CIPP)), or equivalent, or admission to the bar or equivalent legal qualification would be an asset.
Experience:
You have proven data protection expertise and experience.
You have extensive practical experience in data protection acquired at national or international level, in particular practical experience in applying data protection rules (preferably EU data protection framework).
You preferably have experience working in an international environment and in dealing with EU actors and bodies or Inter-Governmental Organizations (IGOs).
You will act with the required independence and impartiality.
Technical competencies:
Knowledge of EU regulations.
Knowledge of administrative rules and procedures.
Drafting and writing of official documents.
Stakeholder relationship management, in particular data protection commissions, communities of DPOs of other IGOs.
Risks assessment for compliance and data protection purposes.
Compliance auditing.
Behavioural competencies:
Communicating Effectively: delivering presentations in a structured and clear way; adjusting style and content to the audience; responding calmly and confidently to questions.
Achieving Results: having a structured and organised approach towards work; being able to set priorities and plan tasks with results in mind.
Demonstrating Flexibility: being willing to work on different projects simultaneously.
Demonstrating Accountability: maintaining confidentiality.
Language skills:
Spoken and written both English and French.

Employment type
Contract

Work arrangement
Hybrid