Security & Data Protection Officer

Purpose

We are seeking a Security & Data Protection Officer for IDEMIA Romania. Within the local organization, he/she will foster a culture of compliance and security by: 

• Ensuring adherence to applicable privacy and data protection requirements; 
• Maintaining effective oversight of our physical security program; 
• Supporting security and information protection within our business relationships.

The selected individual is expected to act with a high degree of autonomy to identify, document and ultimately resolve deviations from all major areas of responsibility: personal data protection, physical security and classified information protection. 

Key Missions

Responsabilities: 

Data Protection
•Compile and maintain accurate personal data processing and data breach registers for the local organization; 
•As required, draft or update data privacy impact assessments in close collaboration with stakeholders; 
•Advise management on personal data processing activities, whether for commercial or internal use;
•Represent the local organization in contacts with the national supervisory authority, including personal data breach notifications; 
•Deliver applicable domain training to staff handling personal data.  

Physical security
•Oversee the effective implementation of our physical security program, in close cooperation with local resources (internal and external staff) and corporate security management; 
•Maintain full compliance to national laws pertaining to the area of physical security; 
•Represent the physical security function during external certification audits (PCI-CPP, GSMA-SAS-SM) and client audits; 
•Monitor and improve the performance of applicable domain vendors (manned guarding, quick response, security systems);
•Deploy and oversee the application of global security policies at local level and, where required by local law, implement adequate adaptations; 
•Organize Local Security Committee meetings and coordinate general security awareness activities.

Classified information protection
•Coordinate implementation of classified information protection measures across the local organization:  

• Elaborate applicable domain internal norms and the overall plan for the prevention of classified information leakage; 
• Oversee implementation of said norms and monitor adherence; 
• Advise the head of the organization in all aspects relating to the protection of classified information.  

•Represent the local organization in contacts with applicable domain national authorities, partners/clients;  
•Conduct/support personnel vetting activities and offboarding: 

• Guide selected individuals throughout the vetting process, including preparation and submission of vetting forms/requests; 
• Maintain custody and record of personnel security clearances;
• Withdraw/return personnel security clearances, based on applicable domain norms/law;    

•Deliver applicable domain training to individuals involved in classified projects; 
•Coordinate local implementation of new classified projects. Represent IDEMIA Romania with government and private security and certification organizations

Profile & Other Information

Profile:
•At least Bachelor or equivalent degree
•Relevant experience in all major domains 
•Proficient with Microsoft Office Suite applications (Word, Excel, PowerPoint and Outlook)
•Outstanding proactive communication skills: written, verbal, presentations. 
•Self-driven, analytical, and results oriented with proven sound judgment.
•Strong verbal and written skills in English, French would be a plus.

Specific requirements
This position requires the candidate to be a Romanian Citizen and be able to obtain a personal security clearance.