As a Privacy Officer, you are the point of contact for privacy within a healthcare organization. You ensure that privacy policy is not only well-documented but also applied in practice. You translate the GDPR and other relevant laws and regulations into clear agreements, practical solutions, and workable processes. You work organization-wide and easily switch between policy, advice, and implementation.
You advise the board, management, supervisors, and employees and know how to make privacy issues clear and understandable. At the same time, you maintain an overview of risks, actions, and improvement measures. You chair the Information Security and Privacy committee and work closely with the Data Protection Officer (DPO) and the Security Officer.
What you will do.
- develop and update privacy policy, procedures, and multi-year plans
- coordinate DPIAs and monitor their follow-up
- coordinate the handling of data breaches, security incidents, and rights requests
- manage privacy registers, including the processing register and data breach register
- monitor improvement measures from audits, risk analyses, DPIAs, data breaches
- advise the board, management, supervisors, and employees on privacy risks and appropriate measures
- support in drafting, checking, and aligning processor agreements
- contribute ideas on new systems, applications, AI applications, innovations, and new data processing operations
- contribute to privacy by design and privacy by default
- increase privacy awareness and stimulate a culture where careful handling of personal data is part of daily work
- coordinate incident communication, internal and external
- coordinate agreements and requests regarding camera surveillance and surveillance footage
- ensure coherence, progress, and effectiveness within the Information Security and Privacy committee
- connect privacy with information security and compliance
Profile
You are someone who makes privacy understandable and practical. You are firm, but do not reason solely from rules. You look at what is possible, ask the right questions, and help colleagues make conscious choices. You are proactive, organizationally sensitive, and strong in communication. You can translate complex laws and regulations into clear language and concrete agreements. Even without a formal hierarchical position, you know how to get people on board. You work independently but actively seek collaboration.
What they ask
- HBO (higher professional education) work and thinking level, preferably with a background in business administration, law, information management, or public administration
- at least 2 years of experience with privacy, data protection, or information security
- good knowledge of the GDPR and its practical application within organizations
- experience with performing or guiding DPIAs
- affinity with IT systems, authorizations, links
- project management skills and the ability to translate plans into concrete actions
- an analytical view with which you quickly understand and prioritize risks
- the decisiveness to escalate when necessary
- a constructive attitude, even when situations are complex or tense
- the flexibility to switch quickly during major incidents
Preferences.
- an accredited education in the field of data protection, privacy law, risk management, or information management
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.