Group DPO/Head of Privacy & Data Regulation

At SD Worx, you’ll work in an environment where collegiality, trust, and meaningful work truly matter. 
You’ll have room to grow, with training and career opportunities tailored to your ambitions.
We believe in hybrid working and support what you need to feel good — both on and off the job.
More than just a payslip? Absolutely!
This is where you build a career that makes a difference.

Tasks

As the Group DPO, you manage the SD Worx privacy and data protection management system and you are responsible for leading the Privacy and Data Regulation team. You ensure compliance with the GDPR, EU Data Act and other data focused regulations and you develop and continuously improve the SD Worx group privacy program.

You also act as a senior advisor on the data protection and data governance implications of emerging technologies, including AI, automated decision-making and data-driven services, ensuring that innovation is enabled in a compliant, transparent and trustworthy way.

You’re able to achieve that by working on the following major activities:

Privacy program & team

• Accountable for the Privacy/Data Protection strategy and management system for the SD Worx group and continuously improve and expand this further within the group

• Lead, grow and coach an international team of data privacy professionals

• Own, maintain and monitor compliance with privacy and data protection policies of the SD Worx group, that you integrate in the wider SD Worx Security & Privacy Program in close collaboration with the Group CISO.

• Identify privacy obligations and privacy risks and ensure the appropriate controls are established to meet these requirements and mitigate the associated risks.

• Advise and increase awareness of business, technology and all staff who carry out processing of personal data of their obligations.

• Advise on the privacy and data protection implications of AI use cases, automated decision-making, profiling, data analytics and data reuse, including appropriate DPIAs, transparency measures and governance controls.

• Work closely with Legal, Compliance, Security, Product, Data and AI governance stakeholders to ensure that privacy-by-design and data protection requirements are embedded in new products, platforms, AI-enabled services and business processes.

• Provide expert advice on all matters related to data protection including data protection impact assessments and prior consultations, and personal data breaches.

• Ensure appropriate response to personal data breaches.

External relations

• Cooperate with and act as the contact point for the data protection supervisory authorities and data subjects in case of personal data breach notifications, inspections or enquiries

• Lead in building trust with SD Worx’ customers, suppliers and other external stakeholders on privacy-related matters (RFI and RFPs, compliance inquiries and assessments, breach handling, other)

Audit, control & reporting

• Monitor regulatory developments and internal compliance readiness in relation to GDPR, ePrivacy, the EU Data Act, AI-related data protection requirements and other relevant EU data regulation.

• Monitor and follow-up on the compliance with applicable data protection legislation, relevant data regulation and the maturity of the SD Worx privacy program through relevant privacy metrics.

• Ensure maintenance of privacy related certifications and assurance reporting (ISO 27701 certification and ISAE3000 GDPR assurance report).

Strategic Leadership & Business Impact

• Strong business acumen and ability to connect privacy strategy to commercial, operational and technology objectives.

• Proven ability to make pragmatic, risk-based decisions in complex and fast-changing environments.

• Experienced executive stakeholder manager, capable of influencing leadership teams and driving strategic outcomes.

• Track record of leading international teams through transformation and organizational change.

• Able to position privacy and data regulation not only as a compliance obligation, but as a strategic enabler of customer trust, innovation and sustainable growth.

Profile

Technical Competencies:

• Demonstrated experience +10y in leading the strategy and programs in the field of data protection/GDPR compliance for a large international technology and/or services player, combining deep expert knowledge with broad management experience and authority.

• You have excellent knowledge of EU data protection laws and have proven experience in translating these into a business environment

• You have a strong understanding of the interaction between GDPR, the EU Data Act and emerging AI regulation, including the impact of AI, automated decision-making, profiling and data analytics on privacy, transparency and individual rights.

• Experience advising business and technology teams on privacy-by-design for digital products, AI-enabled solutions, data platforms and data-driven business models.

• You have demonstrable hands-on experience in evaluating and supporting negotiations on privacy matters in contracts

• You are confident and able to debate technical approaches and tradeoffs in products and business processes vs privacy

• A CIPP/E or CIPM professional certification is not required but considered a plus.

Personal Competencies:

• Passionate in driving and improving privacy and data protection by influencing others

• You are autonomous, proactive and like to take initiative

• You have excellent communication skills and are able to translate legal compliance requirements and constraints and articulate business impact

• You are comfortable with a pragmatic, hands-on approach and are able to manage ambiguity

• You build and drive customer trust in SD Worx’ ability to protect customer personal data and to be the trusted business partner for our customers.

• You are a team player that collaborates fluently in a matrix organization with business leadership and with legal and compliance experts.

• You love to work in an international team in which you will have contact with colleagues from multiple countries and backgrounds

• Excellent English language skills, full professional proficiency in Dutch and French

Strategic Leadership & Business Impact

• Strong business acumen and ability to connect privacy strategy to commercial, operational and technology objectives.

• Proven ability to make pragmatic, risk-based decisions in complex and fast-changing environments.

• Experienced executive stakeholder manager, capable of influencing leadership teams and driving strategic outcomes.

• Track record of leading international teams through transformation and organizational change.

• Able to position privacy and data regulation not only as a compliance obligation, but as a strategic enabler of customer trust, innovation and sustainable growth.

Salary range information will be shared with candidates during the initial interaction with the Talent Acquisition team, either by phone or email.

How to apply

We want to make the hiring process as smooth and transparent as possible.  
Here’s what you can expect after submitting your application: 
✅ Application – Submit your application quickly and easily through our career page.  
Initial Contact – If your profile matches the role, you'll have a phone or video interview with a recruiter.  
 Interviews – Meet with the hiring manager and possibly other key stakeholders in one to three interviews.  
 Assessment – For this role you'll need to do an assessment.  
References & Offer – We check your references, and if all goes well, you’ll receive a job offer.  
 Welcome to the Team! – Once your contract is signed, we look forward to having you on board! 

Excited to join us? Apply today and take the next step in your career!