Global Data Protection Officer, IKEA

IKEA

Location:
Sweden, Malmö

Category:
Legal

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

You will join a seasoned Global DPO team passionate about data protection, fundamental rights and technology. As a team, we value togetherness, collaboration and creativity. You will also be working closely with our global and local Cyber Security & Privacy, Business Risk & Compliance, Digital, Media & Marketing, People & Culture and other teams across Ingka Group.

Job Responsibility:

Inform, advise, and support the assigned Ingka legal entities and co-workers regarding their obligations under the relevant data protection and privacy laws
Monitor the execution of and provide authoritative advice regarding Data Protection Impact Assessments (DPIA) and the associated privacy assessment processes, Records of Processing Activities (ROPA), individual rights requests, data breaches, third parties and data processing agreements
Perform compliance verification activities and reviews, identify gaps in the implementation of data privacy controls and support the development of appropriate training and awareness, guidance and process improvements
Prepare clear and effective reporting to the senior management, including the boards of the assigned legal entities
Act as the principal point of liaison for Ingka Group and assigned legal entities with supervisory authorities and data subjects in the relevant jurisdictions

Requirements:

Master's degree in law, business, IT or similar and at least 6 years of relevant professional experience providing data protection advice and developing data protection programmes and frameworks, preferably in a large corporation operating across multiple jurisdictions
Detailed working knowledge of the EU data protection legislation, data protection authorities' decisions and guidance and national and EU-level case law
Passion for data privacy, data ethics and technology and for upholding a fundamental right to data protection in the business context
Extensive practical experience in embedding privacy by design concepts in the business and technological processes, advising on cookies and other tracking technologies, privacy controls design, implementation and monitoring
Attention to detail and strong legal drafting skills that can be used in a commercial setting with business stakeholders, as well as in a public setting with data subjects and data protection authorities
Exceptional interpersonal and stakeholder management skills
ability to communicate clearly and convincingly and to present complex concepts in an accessible manner to technical and non-technical audiences
Professional certifications, including Certified Information Privacy Professional EU (CIPP/E), Certified Information Privacy Manager (CIPM) and Artificial Intelligence Governance Professional (AIGP) or similar

Nice to have:

Experience implementing and working with Digital Compliance and Consumer Protection legislation (e.g. EU AI Act, Digital Service Act, Accessibility Act, Omnibus Directive, etc.) and Cyber Security Laws (e.g. NIS2, Cyber Resilience Act, etc.)
Experience working with Digital, AdTech, MarTech, eCommerce, consent management and data preference solutions
Experience working in retail or manufacturing industry
Good understanding of AI governance, data management and cybersecurity disciplines and knowledge of the EU digital strategy package as well as industry standards, such as ISO27701, ISO27001, SOC, NIST, etc.
Experience implementing data protection programs in the US, China and India

Additional Information:

Job Posted:
April 24, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Global Data Protection Officer