Security & DPO Manager

Job Description
Purpose
We Are Seeking a Security & Data Protection Manager For IDEMIA Secure Transactions Romania. Within The Local Organization, He/she Will Foster a Culture Of Compliance And Security By

• Ensuring adherence to applicable privacy and data protection requirements;
• Maintaining effective oversight of our physical security program;
• Supporting security and information protection within our business relationships.
• Manage the Local Security Officer

The selected individual is expected to act with a high degree of autonomy to identify, document and ultimately resolve deviations from all major areas of responsibility: personal data protection, physical security and classified information protection.

Key Missions
Physical security- up to 80% of the workload

• Oversee the effective implementation of our physical security program, in close cooperation with local resources (internal and external staff) and corporate security management;
• Maintain full compliance to national laws pertaining to the area of physical security;
• Represent the physical security function during external certification audits (PCI-CPP, GSMA-SAS-SM) and client audits;
• Monitor and improve the performance of applicable domain vendors (manned guarding, quick response, security systems);
• Deploy and oversee the application of global security policies at local level and, where required by local law, implement adequate adaptations;
• Organize Local Security Committee meetings and coordinate general security awareness activities.

Classified information protection

• Coordinate implementation of classified information protection measures across the local organization:
• Elaborate applicable domain internal norms and the overall plan for the prevention of classified information leakage;
• Oversee implementation of said norms and monitor adherence;
• Advise the head of the organization in all aspects relating to the protection of classified information.
• Represent the local organization in contacts with applicable domain national authorities, partners/clients;
• Conduct/support personnel vetting activities and offboarding:
• Guide selected individuals throughout the vetting process, including preparation and submission of vetting forms/requests;
• Maintain custody and record of personnel security clearances;
• Withdraw/return personnel security clearances, based on applicable domain norms/law;
• Deliver applicable domain training to individuals involved in classified projects;
• Coordinate local implementation of new classified projects. Represent IDEMIA Romania with government and private security and certification organizations

Data Protection-up to 20% of the workload

• Compile and maintain accurate personal data processing and data breach registers for the local organization;
• As required, draft or update data privacy impact assessments in close collaboration with stakeholders;
• Advise management on personal data processing activities, whether for commercial or internal use;
• Represent the local organization in contacts with the national supervisory authority, including personal data breach notifications;
• Deliver applicable domain training to staff handling personal data.

Specific Requirements
Profile & Other Information
This position requires the candidate to be a Romanian Citizen and be able to obtain a personal security clearance.

Profile

• At least Bachelor or equivalent degree
• Relevant experience in all major domains
• Proficient with Microsoft Office Suite applications (Word, Excel, PowerPoint and Outlook)
• Outstanding proactive communication skills: written, verbal, presentations.
• Self-driven, analytical, and results oriented with proven sound judgment.
• Strong verbal and written skills in English, French would be a plus.