Data Privacy Expert

Job description

What you do :

Key Responsibilities:

• In alignment with Head of Health DPO, provide strategic and operational advisory to Allianz entities and affiliates on data privacy compliance, bridging multi-jurisdictional regulatory frameworks (Egyptian Personal Data Protection Law (PDPL)) and Allianz Partners' internal privacy governance, including the APS and BCRs.
• Perform privacy risk assessments using a contextual, risk-based methodology that aligns business practices with applicable privacy obligations, supporting consistent decision-making and risk mitigation.
• Review Privacy Impact Assessments (PIAs), integrating privacy controls via Allianz Partners’ automation tools (e.g., OneTrust).
• Serve as a key enabler for business teams, translating privacy requirements into practical guidance and supporting solution-oriented decision-making across operational and strategic initiatives.
• Review data processing agreements, ensuring alignment with regulatory expectations and corporate standards.
• Oversee the handling of data subject rights requests and incident management workflows, including DSAR triage, breach response, remediation tracking, and reporting. Ensure procedural integrity and timely stakeholder communication.
• Support privacy culture through tailored training, awareness campaigns, and stakeholder engagement, ensuring teams understand evolving responsibilities and embedding privacy-by-design into operational thinking.

What you bring :

Desired Requirements / Skills / Expertise:

• Bachelor‘s degree in law, IT, or related disciplines is required.
• Minimum of 2 years of experience in privacy advisory, data protection operations, or compliance roles, ideally in multinational or cross-jurisdictional settings.
• Proven expertise in navigating complex regulatory frameworks (GDPR, local APAC laws, ISO 27001/27701, and privacy governance frameworks such as NIST or EDPB guidelines).
• Skilled in designing, assessing, and refining privacy-related processes and controls, including DPIA workflows, DSAR handling, and third-party risk assessments.
• Demonstrated ability to break down complex regulatory and operational privacy issues into actionable insights tailored for legal, technical, and executive stakeholders.
• Ability to communicate effectively with various stakeholders (e.g., business, legal, IT, security…) about data protection and privacy matters.
• Strong interpersonal, influencing, and negotiation skills in high-stakes or cross-cultural environments.
• Proactive, accountable, and solution-oriented mindset.
• Unwavering commitment to ethical conduct, discretion, and data stewardship.
• Professional certifications such as CIPM, CIPP/E, CIPT, AIGP, CPDSE, or OneTrust certifications preferred; additional training in AI governance or risk management is a plus.
• Fluency in both written and spoken English is essential.