Data Protection Expert

About the role

ING Hubs Romania provides software development, data management, non-financial risk and compliance, audit and retail operations services to 24 ING units worldwide. The Data Protection Expert delivers day-to-day data protection executive services to entities within the ING Group, working closely with the Chapter Lead Data Protection Executive Services, the DPE and DPO teams of other entities, and the Group Data Protection Executive Office and Data Protection Office. The role supports compliance with the ING Group's Global Policy for Data Protection (GPDP) and the group's personal data strategy.

Key responsibilities

• Drive the implementation of the GDPR and other legislation through governance, data inventory, data policies and processes, and controls.
• Provide first-line support and operational assistance on data protection matters for business lines and support functions.
• Monitor the implementation of GPDP local and global procedures and other data protection laws, regulations, policies and best practices.
• Cooperate with first-line teams during yearly key control testing (KCT) and help prepare for it.
• Create awareness and deliver training on data protection compliance.
• Assist in investigating data breaches, manage breach notifications, resolve incidents and report them to local authorities where required.
• Help maintain Records of Processing Activities and carry out Data Protection Impact Assessments, Legitimate Interest Analysis and Transfer Impact Assessments.
• Manage retention periods for personal data and ensure timely deletion or destruction.
• Prepare GPDP-related metrics, activity reports and presentations for Group and local stakeholders.
• Advise contract owners by assessing third-party contracts (data processed, purposes, subcontractors, third countries).
• Participate in the local implementation of global GPDP programmes and help improve how personal data is protected.

Required profile

• Bachelor's degree with about 3 years of professional experience in control, audit, consultancy, compliance or legal fields connected to data protection, preferably in banking or IT.
• Knowledge of national and European data protection laws and practices, and of processing operations, technologies and data security.
• Good understanding of the banking environment, governance structure and banking products and services.
• Legal background and relevant data protection qualifications (CIPP/E, CIPM, CIPT) are a plus.
• Advanced English (speaking and writing).

Required skills

• Stakeholder management and organisational skills.
• Microsoft Office: Word, Excel and PowerPoint are essential.
• Ability to work independently, with strong communication, negotiation and analytical skills.
• Data governance, data quality and data ethics knowledge is a plus.