Legal Counsel - Data Protection and Privacy

at  SAP

WE HELP THE WORLD RUN BETTER

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from.

EDUCATION

• Graduation from accredited law school, further graduation advantageous

REQUIRED SKILLS

• Good knowledge of data protection laws and best practices • Fluency in English

• Strong written and verbal communication and presentation skills
• Professional and trustworthy personality, high level of commitment and flexibility
• Strong team-working skills
• Ability to work in an international environment.

PREFERRED SKILLS

• Proficiency in other languages advantageous
• business/technical background preferred

WORK EXPERIENCE

• General knowledge of company processes and collaboration with global/cross-functional teams
• At least 3 years of working experience in dealing with complex data protection and privacy issues
  What you can expect is professional onboarding, exciting career progression, a diverse work environment providing growth opportunities, learning & development possibilities, and an international business network for you to leverage. Interesting non-work related activities (volunteering, charity, sport events,..)
  This role is based at the ultra-modern Metronom office building directly above the Nove Butovice metro station. The location encompasses SAP’s vision for the perfect work-life balance by featuring uniquely decorated relaxation rooms, parents’ and kids’ room.

PURPOSE AND OBJECTIVES

When processing personal data as part of its business operations, SAP must comply with the requirements of the EU’s General Data Protection Regulation (GDPR) and other applicable data protection and privacy laws in the countries where SAP operates. As part of our global product and services portfolio, the SAP Data Protection and Privacy team aims to protect the rights of individuals involved and meet relevant requirements when processing personal data. In addition, SAP Data Protection and Privacy strives to strengthen SAP’s reputation in the long term as a sustainable and trustworthy partner in the market.
Our objective is to develop and pursue our global data protection and privacy strategy in accordance with our business strategy. This means that we constantly monitor the global regulatory data protection compliance landscape, identify the relevant stakeholders and enable them to take necessary measures for their adoption, and is designed to safeguard the processing of personal data. We are looking for an excellent and highly motivated candidate in the SAP Data Protection and Privacy Legal team to assist SAP in complying with applicable data protection and privacy laws within the scope of SAP’s business objectives. You will find an exciting and future-oriented range of tasks in an international environment.

EXPECTATIONS AND TASKS

We expect the candidate to already have a good knowledge of European data protection laws and best practices, be solution-oriented and able to assess potential risks. In your role, you will be part of the global data protection and privacy legal team and report directly to the SAP Group Data Protection Officer in all areas of responsibility defined by law and internal policies.

You will deal with complex data protection and privacy issues and provide legal advice to internal stakeholders to ensure that risk and governance issues are aligned with SAP’s strategic objectives to drive AI-based business. Your main responsibilities will include the provision of legal advice regarding the following tasks:

• implementation of new or amended data protection requirements based on applicable laws and regulations (e.g. international data transfers)

• support with data subject rights requests and related requests/communication with supervisory authorities • execution of data protection impact assessments for high-risk cases for high-risk cases to mitigate potential risks of AI-based cloud services and products.

• support the day-to-day operations and assist in the design and implementation of internal data protection controls to drive compliance monitoring through the Data Protection Control Framework
• collaboration with different internal business partners to drive awareness, including risks assessments and drive enablement to help them implement potential mitigating actions or requirements to meet data protection compliance
• Drafting and execution of Data Protection and Privacy guidelines and best practices