Information Compliance/Data Privacy Officer

About the Role
Data compliance at Volvo Trucks is not about gates and gatekeepers — it is about enabling the business to move with confidence. We are looking for a trusted guide who helps colleagues across legal, IT, and commercial teams understand what responsible data management looks like in practice, and who makes it easy to do the right thing.

This role is fundamentally about guidance, not governance for its own sake. You will be the person who sits alongside the business — explaining, enabling, and building the understanding that lets Volvo Trucks keep its promise to customers of handling their data with care.

As the Global Data Protection Representative (DPR), you will anchor Volvo Trucks within the Volvo Group Data Protection governance framework — driving compliance with GDPR and international information legislation, while building a culture where privacy is understood, valued, and woven into how we work.

What You Will Do
Guide, not police
Act as the go-to advisor across teams — making complex regulatory requirements approachable and helping people understand the "why" behind compliance, so the right choices happen naturally. Help Volvo Trucks to enable safe innovation and trustworthy use of data and digital technologies.

Bridge legal and IT
Serve as the link between legal, IT, and business stakeholders — translating between technical controls, legal obligations, and commercial realities so nothing gets lost in translation.

Global DPR accountabilities
Lead GDPR and international information compliance for Volvo Trucks. Together with business colleagues, maintain the Record of Processing Activities (RoPA), oversee Privacy by Design, manage DPIA and AI assessments, handle Data Subject Rights requests, and coordinate data breach responses.

Build awareness at scale
Champion proactive compliance literacy across the organization through training, self-assessment tooling, and AI-assisted awareness programs — spreading understanding so compliance lives beyond one team and one role.

Shape lean, practical governance
Collaborate closely with Legal, the Data team, Enterprise Architects, and Cyber Security to build a governance model that is lean, easy to understand, and effective in practice. You make compliance something people do   naturally — not a burden imposed on them.

Location: Gothenburg, Sweden

Who You Are
We are looking for someone who combines deep expertise with a genuine passion for making compliance work in practice. The following skills and qualities matter most:

• Solid, practical knowledge of GDPR — an IAPP/E certification is required, reflecting your genuine commitment to the craft of privacy compliance.
• A head for business – you can balance compliance with innovation and operational reality and identify the real risks amongst the theoretical ones.
• Proven experience supporting privacy compliance in practice: Privacy by Design, RoPA administration, DPIA and AI impact assessments, Data Subject Rights handling, and data breach coordination.
• A skilled communicator who translates complex data, privacy, and regulatory issues into clear, business-focused guidance — your superpower is making the difficult feel accessible to stakeholders at all levels.
• Well-grounded in Information Security — you understand how technical safeguards connect to compliance risks and can work fluently with security and IT teams to identify and close gaps.
• Agile and intellectually curious: you stay ahead of evolving regulations and emerging technologies, navigate ambiguity with confidence, and treat uncertainty as an invitation to learn.
• A proactive builder — you design systems, tooling, and habits that spread awareness and enable self-service compliance, rather than creating dependency on a single expert.
• A collaborative partner who earns trust across organizational boundaries — business leaders, engineers, lawyers, and sales teams all feel heard and well-supported by you.
• Excellent English language skills, both spoken and written.

It Is Considered a Plus

• Experience in a transport-related field — familiarity with global distribution chains, product data, and connected vehicle ecosystems.
• Experience with new models of selling and data monetization 
• Experience working closely with sales organizations and IT teams — you know how compliance conversations land differently in a commercial context versus a technical one.
• Familiarity with international compliance frameworks beyond GDPR, such as CCPA, LGPD, or PIPL, in a multinational operating environment.