Senior Legal Counsel - Data Protection and Privacy (f/m/d)

at  SAP

WE HELP THE WORLD RUN BETTER

Our company culture is focused on helping our employees enable innovation by building breakthroughs together. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. Apply now!

EDUCATION AND QUALIFICATIONS / SKILLS AND COMPETENCIES

• Graduation from accredited law school, further graduation advantageous
• licensed to practice law in Germany, or another jurisdiction within the EU

REQUIRED SKILLS

• You have relevant professional experience and sound knowledge of data protection law and best practices as well as related areas of law, ideally within an international group
• Proficiency in English and German (written and verbal)
• Strong written and verbal communication and presentation skills
• Assertive and convincing personality, high level of commitment and flexibility
• Strong team-working skills
• Ability to work in an international environment

PREFERRED SKILLS

Proficiency in other languages advantageous
business/technical background advantageous

WORK EXPERIENCE

General knowledge of company processes and collaboration with global/cross-functional teams (5 years working experience and more)

PURPOSE AND OBJECTIVES

When processing personal data as part of its business operations, SAP must comply with the requirements of the EU’s General Data Protection Regulation (GDPR) and other applicable data protection and privacy laws in the countries where SAP operates.
As part of our global product and services portfolio, the SAP Data Protection and Privacy team aims to protect the rights of individuals involved and meet relevant requirements when processing personal data. In addition, SAP Data Protection and Privacy strives to strengthen SAP’s reputation in the long term as a sustainable and trustworthy partner in the market.
Our objective is to develop and pursue our global data protection and privacy strategy in accordance with our business strategy. This means that we constantly monitor the global regulatory data protection compliance landscape, identify the relevant stakeholders and enable them to take necessary measures for their adoption, and is designed to safeguard the processing of personal data.
We are looking for an excellent and highly motivated candidate in the SAP Data Protection and Privacy Legal team to assist SAP in complying with applicable data protection and privacy laws within the scope of SAP’s business objectives. You will find an exciting and future-oriented range of tasks in an international environment.

EXPECTATIONS AND TASKS

We expect the candidate to already have a deep knowledge of European data protection laws and best practices, be solution-oriented and able to assess potential risks. In your role as Senior Legal Counsel, you will be part of the Data Protection and Privacy legal team directly reporting to the SAP Group Data Protection Officer in all areas of responsibility defined by law and internal policies.

You will deal with complex data protection and privacy issues and provide legal advice to internal stakeholders to ensure that risk and governance issues are aligned with SAP’s strategic objectives to drive AI-based business. Your main responsibilities will include the provision of legal advice regarding the following tasks:

• use of new technologies in SAP’s cloud services and products (e.g. machine learning, artificial intelligence)
• implementation of new or amended data protection requirements based on applicable laws and regulations (e.g. international data transfers)
• support of strategic data protection programs
• support with data subject rights requests and related requests/communication with supervisory authorities
• execution of data protection impact assessments for high-risk cases
• support the day-to-day operations and assist in the design and implementation of internal data protection controls to drive compliance monitoring through the Data Protection Control Framework
• collaboration with different internal business partners to drive awareness, including risks assessments and drive enablement to help them implement potential mitigating actions or requirements to meet data protection compliance
• Drafting and execution of Data Protection and Privacy guidelines and best practices
• Support investigations on data protection and privacy compliance and related communication