IT Data Protection Assistant

The Data Protection Assistant will function as an IT Data Protection Assistant/Technologist and will directly report to eu-LISA’s Data Protection Officer (DPO) and assist in implementing data protection action plans as well as in supporting the DPO in all aspects of the work with the European Data Protection Supervisor, the Management of eu-LISA and eu-LISA staff. The Data Protection Assistant Technologist will be responsible for: • Assisting the DPO in monitoring data protection compliance of the large-scale IT systems of which eu-LISA is the Management Authority: o Eurodac; o Schengen Information System (SIS II); o VIS; o EES; o ETIAS; o ECRIS-TCN; o Interoperability components; o Future large-scale IT systems • Assisting the DPO in monitoring data protection and security compliance with Regulation 2018/1725 of existing and envisaged technology-based data processing activities in the Agency; • Playing a key role in driving code and architecture reviews as well as large cross-Agency data protection reviews of IT systems and features; • Conducting technical reviews for new features and identifying data protection concerns; • Working closely with technical and non-technical teams; • Assisting the DPO in drafting, developing and promoting procedures, methodologies, strategies and policies in the personal data protection domain; • Assisting the DPO in the preparation of documents for the Management Committee (MC) and reporting; • Assisting in providing good practices and guidelines to help protect personal data and mitigate any risk, including guidelines on the protection of personal data in IT governance and IT management, mobile devices, web services, mobile apps or cloud computing; • Assisting the DPO in the preparation of information materials, presentations and information awareness sessions concerning Data Protection issues; • Contributing to research and analysis for the DPO on technical issues; • Contributing to advising and/or assisting with any potential or actual personal data breach as defined by the applicable legal framework, in consultation with the Data Protection Officer, including preparation of draft reports for management and supervisory authority if required; • Assisting in the review of current practices and technology including, but not limited to, privacy-enhancing technologies; • Assisting and supporting IT project managers/business owners in translating the principles of data protection by design and by default into technical requirements when developing new IT systems; • Assisting the DPO with consultations from IT Project Managers/Business Owners in regards to their data protection obligations including, when applicable, Data Protection Impact Assessments; • Monitoring and reporting to DPO on IT developments which can have an impact on the field of data protection at European and global legislation; • Assisting the DPO in ensuring that tasks related to the IT change management procedure are properly and duly completed; • Working closely with the security unit in regard to the implementation of the appropriate technical and organisational security measures referred to in Article 33 of the Regulation 2018/1725; • Performing any other tasks assigned by the DPO.