Data Risk Manager

We are your Energy Technology Partner . We electrify, automate, and digitalize every industry, business, and home, driving efficiency and sustainability for all. At Schneider Electric, our values - IMPACT (Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork) - are the foundation of everything we do. Becoming an Impact Maker means turning sustainability ambitions into actions at the intersection of automation, electrification, and digitization. Are you ready to lead the digital transformation to create a more sustainable world? If you are up to challenge your creativity and make an impact, we are excited to welcome you! Schneider Digital is the digital department of Schneider Electric, leading the digital transformation in the company by giving support globally to our internal teams and our clients. Schneider Digital consists of 6 Digital Hubs worldwide which are strategically located to ensure a 24/7 support across the company (France, China, India, USA, Mexico and Spain). Our Digital Hub in Barcelona is formed by +450 employees working in strategic projects and different roles such as Data, Cybersecurity, ERP, Cloud, Infrastructures, IT Project Management or Digital Marketing. The Data & Performance (D&P) organization drives the Company's agenda to delivered Trust Data @ Scale. As part of this, it also owns the company's data security strategy and initiatives to ensure proper data guardrail is in place. Aligned to our Code of Conduct, the Trust Charter, and the regulatory landscape, we are seeking an experienced Data Risk Lead with an innovative, agile and pragmatic mindset to secure data flows, architecture, bolster regulatory compliance and future-proof our Data Strategy for existing and emerging threats. The role will suit you if you have: • External or internal consulting / advisory experience • Experience in data risk and data privacy in other parts of SE such as product or digital • Able to distill complexities into a succinct story for executive (e.g. 1-pager PowerPoint) • Able to collaborate with vendors, digital, business/ functions, etc. • Have data analytics, security, or data access knowledge and experience What will you do? Duties and responsibilities • Lead the Data Risk management activity (inc. focus on Data privacy and protection), governing the rollout of policies, controls, standards and maturity measurement. • Lead key Data Risk & Security Portfolio initiatives, such as our data privacy and protection program. • Support Data Risk governance topics such as data risk assessments, privacy reviews, DPIA, data residence or data localization • Proactively engage the network of Data Officers & Data Domains with respect to Data Risk while providing guidance and mentoring to Data Offices as needed • Animating innovation and knowledge exchange on data risk best practices, education and awareness initiatives • Using data and learnings from incidents, assessments and audits to drive our strategy • Provide dashboard to management visibility of data risks • Manage ISO 27710 to achieve compliance and drive maturity • Collaborate and work as a team (internal and external) to achieve team objectives • Develop and deliver training education and awareness initiatives • Provide guidance and ensure Business Data Offices' continuous compliance to Schneider Electric security, legal and data privacy policies and standards. What qualifications will make you successful? Experience The candidate is expected to have achieved an industry recognized privacy certification (e.g. CIPT or CIPP/E) and/or an academic university degree. • External or internal consulting / IT advisory experience is valuable • Experience in data security in other parts of Schneider Electric such as product or digital is relevant, including topics such as data classification, or data leakage. • Able to distil complexities into a succinct story for executive (e.g. 1-pager powerpoint) • Risk Assessment & Management skills / Audit capabilities: certifications, crown jewel evidence, BCP on track, postmortem on security incidents for gov adherence, overall reporting on security platform incidents • Experience in developing security policies & processes • Experience in OneTrust privacy solutions (Privacy Automation) • Some experience in M&A assessments would be desirable. Professional Experience and Competences • Four (4) to six (6) years related professional experience in the privacy field, including previous performance of privacy reviews • Law Degree can be relevant, although we will evaluate candidates with different backgrounds. • Privacy and/or Information Security certification (e.g. CISSP, CISM, CIPP, CIPM) and knowledge of applicable privacy regulations and frameworks (e.g. GDPR, CCPA, NIST CSF) desirable • Relevant education or external accreditation in the areas of data protection, security, audit, quality or risk management would be a plus. • Strong communication (incl. in a technical manner) and collaboration skills are required • Ability to handle complex information, solve problems, and manage multiple tasks • Strong organizational skills are required Soft Skills • "Customer first, Innovation Oriented" ways of working (flexible, personable, approachable, creative, bias-to-action and pragmatic) • Strong problem-solving skills. • Strong written and verbal communication skills to effectively communicate security principles, policies and procedures into actionable designs and simple to follow mitigation steps for team members • Ability to work under tight deadlines and self-prioritize responsibilities. • Innovative, creative, entrepreneurial • Team player & relationship builder • Corporate - understanding company strategy and how it relates to our Data Strategy What will you get? We adapt to you: With our flexible schedule, you'll have the freedom to adjust your work hours to accommodate your personal needs and responsibilities. We know how great it is to work from home. With our hybrid work plan, you can enjoy working from the comfort of your home. Need more time to relax and disconnect? With our Holy Pack, you can purchase additional vacation days to recharge when you need it most. Celebrate holidays your way! With Floating Holidays, you can exchange holidays for other days that better suit your plans and personal preferences. Need additional time to explore new experiences or focus on personal projects? With the Sabbatical Pack, you can request up to 2 months of extra leave (unpaid). We value the importance of family and want to support you in all aspects of your life. Our Global Family Leave Policy provides flexible paid conditions for when you need it most, whether you're about to be a parent, need time to overcome a loss, or to care for a loved one. We take care of you: With access to the health and wellness platform Wellwo, you and up to 5 people of your choice can enjoy access to wellness content, nutrition counseling, fitness classes, and more! From dance classes to booking a hotel spa, we offer an agreement with Wellhub so you can access a network of thousands of gyms and sports centers to keep your body active in the way you like best. Your well-being is our priority. You will have medical service at your workplace for close attention to any medical needs. We empower you: With Career Hub, our AI-driven professional development platform, you can connect with job opportunities, projects, and mentors at Schneider Electric globally. We offer you the opportunity to be a shareholder of Schneider Electric and share in our achievements with our stock ownership program. We celebrate everyone's talent and success with our recognition program, through which you can give and receive points for your achievements and redeem them for gift cards at your favorite stores. You will have life insurance for your protecti