Data Privacy Analyst
- Λεμεσός
- Μόνιμη
- Πλήρης Απασχόληση
- Manage and coordinate the response to data subject rights requests (DSARs), including access, erasure, and portability, ensuring legal deadlines are met and operational risks are mitigated.
- Maintain and enhance the Record of Processing Activities (RoPA), including working closely with business units to document data flows and processing operations.
- Conduct and review Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs), advising business stakeholders on risks and mitigation strategies.
- Support or lead vendor privacy risk assessments, including reviewing DPAs, SCCs, TIAs, and monitoring third-party compliance.
- Participate in the investigation and documentation of data breaches or incidents, including root cause analysis, risk assessments, and regulatory notification support.
- Collaborate with internal stakeholders across Legal, Security, HR, Marketing, and IT to embed privacy-by-design into products, services, and operations.
- Assist in regulatory readiness projects and maintain awareness of evolving privacy laws (e.g., GDPR, CCPA/CPRA, LGPD, PDPA, etc.).
- Draft and update privacy notices, internal procedures, and awareness materials in collaboration with the DPO office.
- Monitor and analyze trends in privacy enforcement, industry best practices, and legislative developments to support continuous program improvement.
- 2+ years of experience in privacy, data protection, legal, compliance, or risk roles.
- Solid understanding of GDPR and international privacy laws (CCPA, LGPD, etc.).
- Experience conducting DPIAs, vendor assessments, and responding to DSARs.
- Strong legal/technical acumen and ability to translate privacy requirements into practical actions.
- Excellent written and verbal communication skills, including experience with policy writing and stakeholder engagement.
- Self-starter with strong organizational and time management skills.
- Professional certifications such as CIPP/E, CIPP/US, CIPM, or equivalent.
- Experience in highly regulated or data-intensive industries (e.g., gaming, finance, fintech).
- Familiarity with GRC tools, privacy management software (e.g., OneTrust, TrustArc), or IT risk platforms.
- Experience contributing to regulatory audits, due diligence exercises, or internal investigations.
- Attractive salary package.
- Annual incentive bonus.
- Monetary vouchers on Birthdays and other special occasions.
- Options to enrol in Company's medical insurance plan.
- Possibilities to enrol in Company's pension plan.
- A chance to advance professionally inside one of the world's largest iGaming organisations.