Data Protection Expert

About the role

ING Hubs Romania provides services to 24 ING units worldwide, including data management, core banking and compliance. The Data Protection Expert delivers day-to-day data protection executive services to entities within the ING Group, working closely with the Chapter Lead Data Protection Executive Services, the DPE and DPO teams of other entities, and the Group Data Protection Executive Office and Data Protection Office. The role supports compliance with the ING Group's Global Policy for Data Protection (GPDP) and the group's personal data strategy.

Key responsibilities

• Drive the implementation of the GDPR and other legislation through governance, data inventory, policies, processes and controls.
• Provide first-line support and operational assistance on data protection matters for business lines and support functions.
• Monitor the implementation of GPDP procedures and other data protection laws, regulations and best practices.
• Support the yearly key control testing (KCT) and help stakeholders meet the key controls.
• Create awareness and deliver training on data protection compliance.
• Assist in investigating data breaches, manage breach notifications, resolve incidents and report them to the local authorities where required.
• Help maintain Records of Processing Activities and carry out Data Protection Impact Assessments, Legitimate Interest Analyses and Transfer Impact Assessments.
• Manage retention periods for personal data and ensure deletion or destruction after expiry.
• Prepare GPDP-related metrics, activity reports and presentations for Group and local stakeholders.
• Advise contract owners on third-party data processing, including data subjects, purposes, subcontractors and third countries.
• Participate in the local implementation of global GPDP programmes and work with business unit data protection leads to improve personal data protection.

Required profile

• Bachelor's degree with about 3 years of professional experience in control, audit, consultancy, compliance or legal fields connected to data protection, preferably in banking or IT.
• Knowledge of national and European data protection laws and practices, and of processing operations, technologies and data security.
• Good understanding of the banking environment, governance and banking products and services.
• Legal background and data protection qualifications (CIPP/E, CIPM, CIPT) are a plus.
• Advanced English (speaking and writing).

Required skills

• Stakeholder management and organisational skills.
• Microsoft Office: Word, Excel and PowerPoint are essential.
• Ability to work independently, with strong communication, negotiation and analytical skills.
• Data governance, data quality and data ethics knowledge is a plus.