Information Security and Data Privacy Specialist Job at IKEA (Warszawa)

Security Program Specialist II

At WHOOP, we're on a mission to unlock human performance and healthspan. WHOOP e...

Location

United States , Boston

Salary:

85000.00 - 135000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

2–4 years of professional experience in a security, privacy, compliance, or technical support role
Familiarity with security and privacy concepts such as vulnerability reporting, data protection, and regulatory compliance (SOC 2, GDPR, etc.)
Strong organizational skills with the ability to coordinate across multiple teams and stakeholders
Technical aptitude to perform basic analysis of security reports (e.g., reviewing proof-of-concept exploits, testing reproduction steps)
Excellent written and verbal communication skills, with the ability to explain technical issues to non-technical stakeholders
Interest in growing your career in either engineering (security/product) or information security (governance, risk, and compliance)

Job Responsibility

Triage and evaluate bug bounty submissions, escalating valid vulnerabilities to engineering for remediation and coordinating response
Perform level 1 troubleshooting for member-reported privacy or security concerns, ensuring issues are routed appropriately
Coordinate responses to auditor and regulator requests, including gathering SOC and compliance evidence
Partner with Product Security Engineers to organize and document threat modeling sessions, leaning on technical experts for deep technical details
Track and communicate the status of security issues, ensuring timely follow-up and resolution
Support process improvements to make WHOOP’s security and privacy operations more efficient
Develop, maintain, and track KPIs that measure the effectiveness of product security programs and provide visibility into team performance and risk reduction
Work closely with software teams across the department to adopt and rollout new tooling and security process changes

What we offer

equity
benefits

Fulltime

Data Product Specialist

Join our Global Digital & Loyalty team as a Data Product Specialist who lives an...

Location

Poland , Warszawa

Salary:

Not provided

Circle K

Expiration Date

Until further notice

Requirements

Responsive to evolving business needs
Analytical thinker who balances creativity with pragmatism
Excellent communicator in English, able to translate complex concepts for technical and non-technical stakeholders
Customer-obsessed problem solver who collaborates across geographies and levels
Curious lifelong learner with a passion for retail, loyalty programs and emerging analytics techniques
Higher degree in Engineering, Data Science, Statistics or a related analytical discipline
3+ years of experience in one or more of: data engineering, data analytics or data stewardship
Strong awareness of data governance frameworks and privacy regulations (e.g., GDPR)
Hands-on with analytical tools such as Power BI, Excel and cloud data warehouses
Familiarity with mobile analytics platforms (e.g., Google Analytics) and loyalty program data is a plus

Job Responsibility

Partner with the Group Product Manager to maintain the data product vision, roadmap and backlog with clear acceptance criteria and measurable outcomes
Translate business questions into metric definitions, data models and scalable self-service data products
Collaborate with Digital Analytics to ensure accurate tagging of key user events in mobile apps (e.g., GA4)
Coordinate with Data Engineering to integrate mobile apps and retail loyalty datasets for a unified end-to-end customer journey
Monitor data pipelines, investigate quality issues and implement automated validation, alerting and remediation processes
Operationalize data governance, privacy and security requirements
Maintain the data catalog and lineage documentation to support discovery
Define and enforce data contracts, SLAs and schema-change processes with source teams
Liaise with Product Performance Analytics to deliver certified datasets on time for monthly leadership dashboards and ad-hoc reporting
Conduct stakeholder interviews to confirm data readiness for key insights and dashboards

What we offer

Contract of employment
Annual bonus
Private medical care
Cafeteria Platform/Multisport
English lessons subsidized by the company
Group insurance
Attractive discounts for products and services at our stations
Employee stock purchase plan
Employee Assistance Program (Lyra)
Modern and convenient office

Fulltime

Senior Specialist, Customer Assurance

We’re looking for a Senior Specialist, Customer Assurance to help us manage and ...

Location

Canada , Vancouver

Salary:

78400.00 - 109800.00 CAD / Year

Hootsuite

Expiration Date

Until further notice

Requirements

Demonstrated years of experience in a security, privacy, customer assurance, or compliance related role (e.g., Security Specialist, Security Support Specialist, Privacy Specialist, GRC Specialist, Information Security or Compliance Auditor) and/or relevant experience in SaaS or technology industry
Bachelor’s degree or equivalent industry experience
Previous experience leading a high volume support request queue
Working knowledge of content management or content automation systems
Solid understanding of information security, privacy, risk, and compliance
Ability to work within tight deadlines and under pressure
Commitment to Results: consistently achieves results, demonstrating high performance, and challenging self and others to deliver result
Priority Setting: focuses time/energy on the most important issues/opportunities. Clearly understand how to assess the importance of tasks and decisions
Collaboration and Teamwork: works with others to deliver results, meaningfully contributing to the team and prioritizing group needs over individual needs
Accountability: holds self and others accountable to meet commitments

Job Responsibility

Communicate directly with internal stakeholders and external customers to understand and address their security, privacy, AI, and compliance concerns, acting as the primary point of contact on these matters for Hootsuite’s GNB and C&E Teams
Collaborate on the security, privacy and AI support process and build strong relationships with teams across the organization (e.g., Sales, Security, Privacy, Product and Technology, Legal), sharing best practices and learnings on what customers need to ensure they’re protected
Coordinate, qualify and prioritize a high volume queue of customer assurance review requests
Accountable for the accurate completion of customer assurance reviews (e.g., questionnaires) and similar customer requests (e.g., contracts) within tight deadlines
Provide expertise and support with RFPs (and similar documents) for Hootsuite’s GNB and C&E Teams
Maintain and further develop the capabilities of an AI-driven response automation tool and customer facing Trust Center to aid in driving process and response efficiency
Facilitate regular enablement sessions and knowledge sharing to update GNB and C&E teams on new security, privacy and AI support, processes and collateral
Manage Salesforce and other reports (e.g., Trust Center reports) that track Customer Assurance program metrics
share key data insights with stakeholders on successes, failure points and key learnings from customer review requests
Oversee the maintenance of security, privacy and AI collateral and certifications including Trust Center, CAIQ, SIG , etc

What we offer

Canadian Benefits: health insurance including medical, dental, vision, life/disability insurances
Employee and Family Assistance Program
group RRSP plan with a company match of up to 4% of base salary
US Benefits: health insurance including medical, dental, vision, and life/disability insurances
401k Plan with a company match (up to 4% of base salary)
Employee and Family Assistance Program
Global Parental Leave: 26 weeks of full and partially paid leave for eligible employees

Fulltime

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...

Location

United States , San Francisco; New York

Salary:

180000.00 - 270000.00 USD / Year

Airwallex

Expiration Date

Until further notice

Requirements

U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
High degree of ownership, resilience, and pragmatism
comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel

Job Responsibility

Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance

What we offer

Offers Equity
Offers Bonus
medical, dental, and vision insurance
a 401(k) plan
short-term and long-term disability
basic life insurance
well-being benefits
20 paid days of vacation
12 paid days of company holidays

Fulltime

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...

Location

United States

Salary:

160000.00 - 250000.00 USD / Year

Airwallex

Expiration Date

Until further notice

Requirements

U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
High degree of ownership, resilience, and pragmatism
comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel

Job Responsibility

Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance

What we offer

Offers Equity
Offers Bonus
medical, dental, and vision insurance
a 401(k) plan
short-term and long-term disability
basic life insurance
well-being benefits
20 paid days of vacation
12 paid days of company holidays in a calendar year

Fulltime

Data Privacy Specialist – Marketing

The Data Privacy Specialist in Marketing will oversee the implementation of data...

Location

South Africa , Johannesburg

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Bachelor’s degree
+5 years’ experience in Data Privacy or related fields
Experience in implementing Data Privacy programs and controls in Marketing functions in multinational organizations
Understanding of Marketing processes and frameworks
Relevant degree and/or Data Privacy certifications and qualifications (e.g. CIPP/E/CIPM/AIGP)
Experience in advising on complex data protection matters with practical advice
Experience in working with or advising large, multinational organizations
Experience in working on compliance projects
Deep knowledge of global data protection laws and regulations
Demonstrates accuracy and thoroughness and high levels of attention to detail

Job Responsibility

Implement NTT DATA Inc.’s Data Privacy policies, processes, and standards within the Marketing function
Lead and support Data Privacy strategic projects and initiatives across global Marketing operations
Support the integration of global data protection requirements into Marketing processes, systems, and transformation initiatives
Contribute to and maintain the Record of Processing Activities (ROPA) for Marketing
Project manage the Data Privacy requirements of new Marketing transformation projects, digital tools, and initiatives
Support the implementation of Marketing centralization and integration initiatives
Ensure data migration, consolidation and integration activities involving personal data are conducted in compliance with applicable data protection regulations and NTT DATA Inc’s Data Privacy standards
Conduct or support Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs)
Identify, document, and assess Data Privacy risks within Marketing and develop strategies to manage or mitigate them
Coordinate and support responses to Data Subject Requests (DSRs) related to Marketing data

Fulltime

New