Data Risk Lead

Description

We are looking for Data Risk Lead to ensure data security, privacy, and regulatory compliance by implementing governance structures, leading risk mitigation strategies, managing incidents, and operationalizing data risk frameworks across the data lifecycle. This role acts as a key liaison between local business units, the Data Risk & Security team, and regulatory authorities, fostering a strong culture of data protection and risk awareness.

• Advise stakeholders (Data Office, Country President, employees) on data protection obligations.
• Govern the Data Risk framework across the data lifecycle, ensuring alignment with Schneider Electric policies and regulatory requirements.
• Design and implement data risk policies and mitigation frameworks.
• Serve as a point of contact for data subjects (employees, customers) regarding privacy queries and claims.
• Liaise with the Data Risk & Security team on assurance and risk management.
• Drive certification of all digital assets within the instance.
• Support investigation and assessment of personal data incidents.
• Program manage risk mitigation and control implementation within the Data Office.
• Recommend and assist in preparing notifications to authorities, data subjects, or customers when required.
• Act as an ambassador for Schneider Electric’s data protection policies and procedures.
• Promote a data protection culture through communication and engagement.
• Report compliance progress using KPIs, KRIs, maturity matrices, and other indicators to executives.
• Ensure data-related processes, systems, and assets are secure and protected from threats.
• Ensure compliance with national data privacy laws and internal policies.
• Anticipate, identify, prioritize, and mitigate data risks.
• Ensure compliance with data controls and regulatory requirements.
• Provide guidance on personal data protection strategies and responsibilities.
• Lead data incident analysis and mitigation.
• Build and execute a Data Risk Assurance Action Plan using global frameworks and tools.
• Establish data privacy governance structures (e.g., steering committees, reporting mechanisms).
• Implement training programs to promote data risk awareness and compliance.
• Ensure privacy clauses are included in supplier contracts.
• Act as the primary contact for local data protection authorities, supported by Legal and Group DPO.
• Contextualize and operationalize the global Data Risk strategy within the local/regional context.
• Develop and maintain a data processing register.
• Monitor overall progress of data risk initiatives.

Requirements

We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.

You must submit an online application to be considered for any position with us. This position will be posted until filled.

• Strong knowledge of data privacy regulations and risk management frameworks.
• Analytical mindset with strong problem-solving capabilities.
• Ability to lead cross-functional initiatives and manage complex programs.
• Willingness to develop own competencies and ability to adapt to a rapidly changing position.
• Bachelor’s degree in Law, IT Security, Data Management, or related field.
• Familiarity with regulatory liaison and incident management processes.
• Excellent communication and stakeholder management skills.
• Proven experience in data risk management, compliance, and governance.
• Expertise in data governance, security controls, and compliance processes.
• Professional certifications in data privacy or security (e.g., CIPP, CIPM, ISO 27001) preferred.

Benefits

€36 billion global revenue+13% organic growth150 000+ employees in 100+ countries#1 on the Global 100 World’s most sustainable corporations

Training + Development

Interview process

Visa Sponsorship

Security clearance