Compliance & AI Governance Expert

Job Description

Data Protection Manager / Legal Counsel | Beiersdorf AG

The Tone:
This is a part-time, temporary role at Beiersdorf AG, located in Hamburg, Germany, for approximately one year. Beiersdorf develops innovative skin and body care products for globally recognized brands such as NIVEA, Eucerin, La Prairie, Hansaplast, and Labello, upholding a 140-year legacy of care. This role is crucial for advising on and developing the company’s global data protection and AI compliance framework. It supports the identification and mitigation of privacy and AI-related risks, ensuring Beiersdorf acts responsibly towards its consumers, employees, the environment, and society, aligning with its purpose: WE CARE BEYOND SKIN.

The TL;DR
• Role: Full Time
• Type: Part-time, Temporary (approx. one year)
• Location: In-person Hamburg, Germany
• Mission: To advise on, develop, and maintain Beiersdorf’s global data protection and AI compliance framework and mitigate related risks.

What You’ll Actually Do
• Advise: Provide expert guidance to various business functions and affiliates on crucial data protection matters and evolving regulatory requirements, with an increasing focus on AI compliance topics.
• Develop: Actively contribute to the ongoing enhancement and refinement of Beiersdorf’s global data protection and AI compliance framework, including its processes and necessary tools.
• Manage Risks: Support comprehensive efforts in the identification, thorough assessment, and effective mitigation of privacy and AI-related risks across the organization.
• Handle Incidents: Assist in the prevention, investigation, ongoing monitoring, and accurate reporting of privacy incidents and compliance violations.
• Ensure Compliance: Define and assess technical and organizational measures, coordinate and maintain data protection documentation, and support audits and monitoring activities related to compliance controls.

The Must-Haves
• Background: University degree in law, business, IT, data science, digital technologies, compliance, risk management, public administration, or a comparable field. Requires proven experience in data protection, compliance, or risk management.
• Experience: Proven experience in a related area of data protection, compliance, or risk management. Demonstrated experience in project management and successful interdisciplinary collaboration.
• Skills: Strong communication and stakeholder management skills. A structured, proactive, and solution-oriented way of working. Excellent written and spoken German and English language proficiency.
• Bonus: Preferred experience in European GDPR. Strong interest in AI governance and AI compliance, ideally with initial practical experience in this field. An advantage is knowledge of data protection laws and frameworks. Affinity for technology, data processing, and digital business models.