Data Protection Officer

Data Protection Officer

We are seeking a strong Data Protection Officer who will play a critical role in driving change, and continuing to build, develop and deliver Booking.com's data protection program to ensure compliance with data protection and privacy laws, including the GDPR.

In this role, reporting to the Chief Privacy Officer, you will have the scope to develop a world-class Data Protection office which partners closely with multiple business units/products to ensure Booking.com remains compliant in all areas of Data Protection.

You will be responsible for the definition and development of business processes, policies related to controlling access to data, data classification, data quality and data life cycle management. This role will provide valuable input in Booking.com's vision to be the Experiences marketplace of the future.

Responsibilities:

This position requires a broad understanding of all relevant legal issues on Data Protection including identifying the need for support from other experienced professionals. You will assist with and provide independent oversight of Booking.com's compliance with data protection legislation, with the opportunity to shape the discussion at Group level across Booking Holdings.

You Will:

• Advise and guide Booking.com on the policies and standards necessary to deliver on the company's data protection obligations
• Consult and engage with relevant Data Protection Authorities, including ensuring regular briefings and maintaining accurate and up-to-date records demonstrating Booking.com's GDPR compliance
• Oversee training and awareness-raising activities internally on data protection and privacy regulatory requirements and policies
• Establish a culture across the company that embeds a respect for data protection and privacy, acting as the champion and role-model for data protection compliance
• Clearly and concisely communicate the potential privacy implications of, and tactical and strategic goals related to, technology proof of concepts and implementations
• Assist in addressing mandatory notification and other legal issues in the event of a data loss or breach
• Communicate complex technical concepts, and their associated privacy implications, with audiences at various levels of technical understanding
• Demonstrate willingness to challenge the status quo and provide creative thinking and strategies for difficult challenges
• Work on innovative and ground-breaking e-commerce projects
• Devise privacy-preserving methods of leveraging large structured, unstructured, transactional and real-time data sets, and analysing usage patterns
• Make actionable recommendations using knowledge of data protection law, statistics, business understanding and common sense

Ideal Experience & Skills:

• Significant years experience in data protection practices and with national and EU data protection laws and practices, with an in-depth understanding of the GDPR
• Proven record of engaging with Data Protection Authorities at the highest levels on matters concerning data protection compliance
• Relevant working experience dealing with data protection and privacy issues for multi-national, ideally Tech or e-commerce, organisations
• Strong knowledge of and interest in emerging technologies and their potential social and economic impacts, including customer-facing e-commerce
• Proven experience in identifying and analyzing complex legal/regulatory/business issues and providing appropriate legal advice regarding applicable legal and professional standards, often on a time-sensitive basis
• Proven ability to manage multiple cases/matters/projects and/or teams of internal and/or external resources
• Knowledge of IT security and experience in working with IT Security teams
• Proven experience of proactive management of global compliance frameworks, and of providing training on compliance frameworks
• Knowledge of data analysis methodologies and experience within a data-driven business

OTHER PERSONAL CHARACTERISTICS

• Character traits: open mind, learning attitude, transparent behavior, positive, overachiever, strong communicator, proactive and collaborative.
• Strategic thinker - able to connect the dots, think long-term and internalize the impact of external industry, regulatory and consumer trends - yet focused on execution; able to roll up sleeves to get things done.
• Able to function in a fast-moving entrepreneurial environment.
• Data driven, experimental, ready to learn and open to change.
• Keep the customer at the centre of everything you do.
• Good cultural and organizational sensitivity.
• Committed to building a diverse, inclusive work environment.

Pre-Employment Screening

If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.