Data Protection Compliance Officer

As Data Protection Compliance Officer you will work on our framework & governance organizing our global responsibilities that facilitate functional steering across the Data Protection function. The role combines ownership of Data Protection policies  and related framework documents, the definition of the Data Protection risk appetite, and a mandate to drive, coordinate, and support the adoption of scalable tooling and AI solutions for the global Data Protection function.

The Team

You will be part of the Global Data Protection Compliance Team, a key and rapidly evolving risk domain with increasing regulatory, supervisory, and internal focus. The team plays a central role in strengthening the global Data Protection control environment through clear policies and frameworks, effective governance, and structured functional steering. Tooling and AI solutions play an increasingly important role in day-to-day compliance activities. The Data Protection Compliance team is located in Amsterdam and Bucharest and we actively support diversity in all its forms.
 

Roles and responsibilities

As a Data Protection Compliance Officer you:

• Are responsible for policy lifecycle management for the Global Data Protection Frameworks including related guidance, standards, and governance documents.

• Drive, coordinate, and facilitate functional planning and steering activities for the global Data Protection function, supporting prioritization, oversight, and structured execution of our activities.

• Manage our outsourced activities for Data Protection and ensure the effectiveness and continuous improvement of related services.

• Define and maintain the Data Protection Risk Appetite Statement, including CRAS/RAC guidance.

• Facilitate the development of our Data Protection year Plan,

• Shape and support the use of scalable tooling and AI within the function, with a focus on productivity, quality, and control enablement.

How to succeed

We hire smart people like you for your potential. We hope to welcome a team player with curiosity, who takes it on and makes it happen, and who never misses an opportunity to learn. We support your development at the intersection of regulation, risk, and technology in a global organization that is diverse and challenging in the most positive way.

Key competencies

• Ability to work in multidisciplinary settings.

• Independent, proactive, and accountable mindset.

• Strong team player with high integrity.

• Alignment with the ING Orange Code and willingness to take the Banker’s Oath.

Your technical skills and track record

• 3+ years of experience in Data Protection, (IT/privacy) Law or Audit.

• Strong track record in framework development, policy governance, and translating regulatory requirements into practical standards and guidance.

• Experience with functional planning, steering, and operating model design in a complex organizational setting.

• Good understanding of risk appetite, key control monitoring, service ownership, and governance processes.

• Affinity with technology, tooling, and AI-related developments, and the ability to connect these topics to compliance and control objectives.

• Excellent stakeholder management and communication skills

• University degree or equivalent experience in Law, Risk, Governance, Business Administration, or a related field, with excellent English communication skills