Data Protection Officer

Pluxee is a global player in employee benefits and engagement that operates in 31 countries . Pluxee helps companies attract, engage, and retain talent thanks to a broad range of solutions across Meal & Food, Wellbeing, Lifestyle, Reward & Recognition, and Public Benefits.

Powered by leading technology and more than 5,000 engaged team members , Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 36 million consumers and 1.7 million merchants .

Conducting its business as a trusted partner for more than 45 years, Pluxee is committed to creating a positive impact on all its stakeholders, from driving business to local communities, to supporting wellbeing at work for employees while protecting the planet.

Employee Contract type :

Permanent Regular

Job Description :

The Data Protection Officer BeLux plays a senior and critical role in ensuring the Group's compliance with data protection laws and regulations (together with the Group Data Protection Office).

The Data Protection Officer BeLux mission involves :

• Contributing to the definition of Pluxee’s Global Data Protection Program and the implementation of data protection strategies with key stakeholders.
• Acting as key representative of the DPO with internal and external stakeholders, advising on a wide range of privacy and data protection matters and collaborating on data protection related projects as well as innovative and digital initiatives.
• Managing the relation between Group Data Protection Office and the countries in charge of his / her responsibilities.

The role involves the following, in coordination with Head of Legal Belux and the Group Data Protection Officer :

Management of the projects regarding data protection matters :

Direct contacts with the internal product owners (IS&T, Data, Communication, Training, Internal Control and Audit, etc.).

Support innovative and digital initiatives in helping to ensure that privacy and data protection issues are appropriately identified and addressed.

Conduct or oversee data protection impact assessments for new projects, products, or processes.

Mitigate risks and ensure that data protection considerations are integrated into business activities.

Review and negotiate data protection and privacy-related provisions in contracts with vendors, partners, and third parties.

Draft and / or review and negotiate data processing agreements and advise on international data transfers.

Keep up to date the Data Protection records.

Training and awareness initiatives of the Global Data Protection Program in Belgium and Luxembourg.

Data Breach Response and Litigation support :

Develop and maintain an effective data breach response plan.

Lead and coordinate the response to data breaches, working with internal teams and external experts as necessary.

Assist local Data Protection Single Points of contact in case of breaches.

Assist in responding to data protection-related complaints and inquiries.

Provide legal support in the event of regulatory investigations or litigation related to data protection matters.

Maintenance of the privacy risks assessment reviews and updated results for Belgium and Luxembourg :

Preparation of the checklist sent annually and the quarterly reporting.

Review of the self-assessment privacy compliance checklists and drafting of summaries.

Support internal controls and internal audits.

Preparation of the presentation to the senior management (e.g., drafting decks for annual reports to CEO / CFO).

Internal and External Relations :

Collaborate with senior management to develop and implement strategic action plans to mitigate the risks identified and better implement the global process regarding data protection.

Provide insights and recommendations to optimize business processes and improve overall performance.

Monitor and engage with relevant data protection authorities.

Represent the company's interests in discussions with regulators and industry groups, if needed under the responsibility of Head of Legal Belux and GDPO.

Drafting and implementation of an annual roadmap on data protection matters.

You’re a match

Must have :

Law Degree.

Minimum of 5 years' experience in Data Protection.

Ability to prioritize multiple responsibilities and stay very organized.

Demonstrated ability to work as part of a team with a collaborative and proactive approach.

Highest standards of and commitment to ethics and business integrity.

Ability to task prioritization with a clear action plan defined.

Good communication and interpersonal skills.

Ability to travel as needed.

Nice to have :

Knowledge of OneTrust modules and functioning.

Knowledge and experience on information security matters.

Knowledge of European and international privacy and data protection-related laws, rules, and regulations.

Excellent Excel, Power Point, Word, and SharePoint skills.

Experience in international business projects.

Languages :

Fluency in French, Dutch, and English.

Your location : Brussels

Happy at work :

A meaningful job : Be the change! Help us build the future of employee benefits by bringing to life sustainable and personalized experiences and contribute to make a real impact on millions of lives.

A great culture : People matter – a lot! Be part of a multicultural team that moves as one in a fast-paced and innovative environment.

An empowering environment : Be yourself! At Pluxee, we proudly embrace diversity and value the uniqueness of our talents.

J-18808-Ljbffr