Personal Data Protection and AI Governance Specialist

Your responsibilities:

• Supporting day-to-day data protection activities, including maintaining the Record of Processing Activities (ROPA), preparing DPIAs and LIAs, assessing vendor risks, and reviewing processing operations.
• Analyzing data protection incidents by gathering facts, collaborating with IT/InfoSec and business teams, and preparing structured assessment reports and recommendations.
• Supporting the assessment of international data transfers (e.g., SCCs, DPF, sub-processors, and other transfer mechanisms).
• Reviewing Data Processing Agreements and privacy-related contractual provisions, escalating complex or high-risk matters where necessary.
• Coordinating Data Subject Rights (DSR) requests and supporting local teams in data searches, documentation, and response drafting.
• Assisting in the risk assessment and onboarding of AI tools, identifying privacy risks and ensuring alignment with the Group AI Governance framework.
• Maintaining and updating internal policies, procedures, templates, and repositories related to privacy and AI governance.
• Tracking compliance actions, identified risks, and remediation activities across jurisdictions.
• Monitoring regulatory developments (GDPR, ePrivacy, EU AI Act) and preparing concise summaries and practical insights.
• Supporting internal training, awareness initiatives, and communication activities related to data protection and responsible AI use.

Our Requirements:

• Preferred: Law degree or a compliance-related field (e.g., legal studies, public administration, European/business law).
• Alternative: IT or security background combined with solid privacy experience (legal/compliance profile strongly preferred).

• 3–4 years of hands-on experience in data protection, privacy compliance, regulatory advisory, or legal roles.
• Practical experience with GDPR implementation in a corporate environment.
• Experience conducting DPIAs, vendor assessments, and reviewing privacy clauses in contracts.
• Exposure to multi-country privacy matters is a plus.

• Strong understanding of GDPR (ROPA, DPIA, incident handling, international transfers).
• Basic knowledge of AI governance and familiarity with the EU AI Act.
• Ability to prepare structured legal/compliance analyses and draft clear documentation.
• Excellent written communication skills with the ability to translate complex topics into business-friendly language.
• Well-organised, detail-oriented, and able to manage multiple stakeholders across jurisdictions.
• Comfortable working independently under supervision and review.
• Tech-aware mindset (data flows, SaaS/cloud environments, digital tools, latest AI developments).

What we offer:

• Work in an international company featured on the Forbes list of the best employers in Poland and beloved by millions of consumers in Poland and Europe.
• A competitive salary and real opportunities for promotion - the development of our employees is the cornerstone of our strategy!
• Life insurance on preferential terms, to feel secure.
• An extensive benefits platform offering a wide range of options – including medical care, sports cards, events, trips, shopping vouchers, and more.
• Discounts on purchases at Pepco stores – get your favorite products at even better prices!
• A wide range of training sessions, courses, and webinars designed to help our employees grow and thrive!
• The opportunity to improve language skills by working in an international environment.

• Free psychological, legal, and financial consultations as part of our employee support program – our employees' well-being is our top priority!
• Smart Lunch – meal subsidies for the company canteen, giving access to daily on-site dishes at discounted prices.
• Financial recognition in the form of jubilee awards, additional days off, and loyalty-based discounts for employees celebrating their work anniversaries.
• A social fund providing additional financial support to ensure security and assistance in various life situations.
• A friendly atmosphere and support from colleagues who are eager to share their expert knowledge – despite being a large organization, we’ve maintained a warm, informal atmosphere.
• A role within a unique organizational culture – Pepcoolture – where our mission, vision, and values are the foundation of our everyday work