Data Protection Officer

Atos Group is a global leader in digital transformation with c. 70,000 employees and annual revenue of c. € 10 billion, operating in 67 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high-performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos is a SE (Societas Europaea) and listed on Euronext Paris.The purpose of Atos is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.MissionMonitor and coordinate DP activities at France level, support data protection topics in his/her perimeter, support the implementation of the Group data protection organization and processes, guiding local (national) and Global Delivery Centers. Take an active role in defining the Group DP strategy and organization – promoting awareness and supporting the DP training program. Be appointed as DPO in front of CNIL for defined French legal entities. Collaborate with other Geo DPOs and the wider DP Community within the Group for the wider benefit of the Group.Main ActivitiesHelp define and implement Group Data Protection strategy with specific responsibility for France and other countries in the perimeter.Help draft, review and roll-out DP policies and processes: both practical & security aspectsMonitor for and report potential DP issues / opportunities for improvement within the Geo and the wider Group, contribute to design and implementation of structural, procedural and policy improvements, share status and planning with the GDPO (Group Data Protection Office)Monitor and advise on evolving DP compliance requirements and best practiceIn consultation with GDPO, act as point of contact for the CNIL for the local legal entities.SupportMonitor implementation of Group Data Protection and Privacy Organization (incl. relevant policies) in the Geo/French operationsReview Compliance Assessments of Data Processing and DPIAs on national levelSupport security reviews of Compliance Assessments of Data Processing for France.Data Protection organizationCoordinate implementation of DP Organization with local DPLEs (DP Legal Experts) and DPOs.Coordinate setup and maintenance of operational organization, e.g. records of processing activities as Controller and Processor (CADP-C and CADP-P records), notifications, DPIA (Data Breach Impact Assessments) and data breach response process.Provide support to data protection points of contact within relevant GDC / countryReview Data Protection and Privacy Organization aspects (audits) for the country or geography.Take the lead at a Group level on specific DP initiativesSupport Security organization in case of Personal Data Breach and events/incidents related to Data ProtectionAssess any in-scope data breach and advise on mitigation and notification requirementsMonitor in-scope DP incidents, follow up on mitigation and remediation actionsIdentify Data Protection related security measures to be implemented in the perimeter - follow up on Data Protection related security measures & actionsOrganize and contribute to Data Protection communication and events (e.g. Data Protection Day) on local and regional level, contribute to global Data Protection communication and events.Relay global & launch local information & communication campaignsTrainingIdentify training needs within the perimeter.Help create, roll-out and deliver trainingReportingReport status, KGI/KPI (Key Goal / Performance Indicators), communication actions, significant events/incidents, potential issues and DP organization status to GDPOContribute to annual data protection reports and CSR reportingProfile8 years of professional experience in data protection in an international company, ideally in the new technologies sector (software, IT service provider).Degree in Law or a Security or IT background in France.Certification as a data protection professional is required.Expert knowledge of data protection law and practices, including the GDPR.Good knowledge of other areas relevant to the IT industry would be desirable, e.g. Security, IT contracts, Compliance.Excellent verbal and written communication skills in French and English. Additional languages are an advantage.Demonstrated strong analytical skills, including the ability to assess risk, conduct DPIAs and propose adequate security measures.International experience is appreciated.Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment. #J-18808-Ljbffr