Data Protection Officer

As a Data Protection Officer, you will play a pivotal role in ensuring the highest standards of data privacy and protection across our digital banking operations. You will be responsible for overseeing our compliance with data protection laws and regulations, advising on best practices, and promoting a culture of privacy awareness throughout the bank. By upholding data privacy, you will also contribute to Advanzia’s commitment to sustainable and responsible business practices. This is a unique opportunity to join a multicultural and innovative team, contribute to our digital transformation, and safeguard the trust of nearly three million customers across Europe.

Your mission is to lead and manage all aspects of data protection and privacy compliance at Advanzia, an unconventional digital bank in the heart of Luxembourg!

This opportunity is a full-time CDI contract.

• Ensure GDPR and related regulatory compliance through robust policies, procedures and proactive monitoring
• Serve as the primary contact for data protection authorities (i.e.: CNPD) and internal stakeholders, ensuring timely and accurate communication
• Advise management and employees on data protection obligations, best practices and emerging regulatory requirements to mitigate risk
• Ensure robust processes are in place for the effective management and timely reporting of personal data breaches, in line with legal requirements
• Maintain and execute a compliance control plan, identifying gaps and implementing corrective actions
• Embed privacy by design in projects and provide guidance on DPIAs and legitimate interest assessments
• Review and negotiate data processing agreements, international transfers and outsourcing arrangements to ensure compliance
• Ensure GDPR compliance in AI systems, including generative AI solutions
• Maintain accurate records of processing activities and ensure timely updates
• Review and update Data Protection Notices, Cookie Policies, and transparency documentation to meet legal obligations
• Oversee data subject request handling and support Customer Service on complex cases
• Drive employee awareness through training to foster a strong compliance culture
• Advise and influence senior management and stakeholders, demonstrating assertiveness and diplomacy to balance regulatory requirements with business objectives

• Master’s degree in law or information security, or a relevant field
• Proven experience as a Data Protection Officer or in a similar privacy/compliance role
• Professional certifications such as CIPP/E, CIPM, CIPT, or AIGPP are a plus
• In-depth knowledge of GDPR and in European data protection laws and practices
• Familiarity with Luxembourgish regulations; knowledge of Germany, Austria, Spain and/or Italy data protection laws and practices is an advantage
• Experience in AI governance or knowledge of the EU AI Act is a plus
• Business Knowledge: previous experience in digital banking or fintech environments
• Proficiency in MS Office (Word, Excel, Power Point)
• Fluency in English is essential; proficiency in French, German or other languages is an asset
• Collaboration and teamwork: A natural team player who thrives in a flat organisational structure, values input from all levels and actively contributes to the collective success of the team
• Transparency and communication: Clear and direct communication style with a commitment to engage openly and constructively, maintaining open channels and promoting information sharing with colleagues
• Adaptability and flexibility: Comfortable working in a dynamic environment, navigating change effectively
• Accountability and integrity: Takes responsibility for personal performance and acts with honesty and transparency in all areas
• Self-motivation and drive: Highly dedicated and motivated to achieve both individual and team goals, with a commitment to excellence and continuous improvement
• Results-oriented: Focuses on delivering tangible outcomes within deadlines