Data Protection Officer

About Atos Group

Atos Group is a global leader in digital transformation with c. 70,000 employees and annual revenue of c. € 10 billion, operating in 67 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high-performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos is a SE (Societas Europaea) and listed on Euronext Paris.

The purpose of Atos is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

Mission

Monitor and coordinate DP activities at France level, support data protection topics in his/her perimeter, support the implementation of the Group data protection organization and processes, guiding local (national) and Global Delivery Centers. Take an active role in defining the Group DP strategy and organization – promoting awareness and supporting the DP training program. Be appointed as DPO in front of CNIL for defined French legal entities. Collaborate with other Geo DPOs and the wider DP Community within the Group for the wider benefit of the Group.

Main Activities

Strategy

• Help define and implement Group Data Protection strategy with specific responsibility for France and other countries in the perimeter.
• Help draft, review and roll-out DP policies and processes: both practical & security aspects
• Monitor for and report potential DP issues / opportunities for improvement within the Geo and the wider Group, contribute to design and implementation of structural, procedural and policy improvements, share status and planning with the GDPO (Group Data Protection Office)
• Monitor and advise on evolving DP compliance requirements and best practice
• In consultation with GDPO, act as point of contact for the CNIL for the local legal entities.

Support

• Monitor implementation of Group Data Protection and Privacy Organization (incl. relevant policies) in the Geo/French operations
• Review Compliance Assessments of Data Processing and DPIAs on national level
• Support security reviews of Compliance Assessments of Data Processing for France.

Data Protection organization

• Coordinate implementation of DP Organization with local DPLEs (DP Legal Experts) and DPOs.
• Coordinate setup and maintenance of operational organization, e.g. records of processing activities as Controller and Processor (CADP-C and CADP-P records), notifications, DPIA (Data Breach Impact Assessments) and data breach response process.
• Provide support to data protection points of contact within relevant GDC / country
• Review Data Protection and Privacy Organization aspects (audits) for the country or geography.
• Take the lead at a Group level on specific DP initiatives

Event/incident management

• Support Security organization in case of Personal Data Breach and events/incidents related to Data Protection
• Assess any in-scope data breach and advise on mitigation and notification requirements
• Monitor in-scope DP incidents, follow up on mitigation and remediation actions
• Identify Data Protection related security measures to be implemented in the perimeter – follow up on Data Protection related security measures & actions

Awareness

• Organize and contribute to Data Protection communication and events (e.g. Data Protection Day) on local and regional level, contribute to global Data Protection communication and events.
• Relay global & launch local information & communication campaigns

Training

• Identify training needs within the perimeter.
• Support Atos GDPO in identifying general DP training needs
• Help create, roll-out and deliver training

Reporting

• Report status, KGI/KPI (Key Goal / Performance Indicators), communication actions, significant events/incidents, potential issues and DP organization status to GDPO
• Contribute to annual data protection reports and CSR reporting

Profile

• 8 years of professional experience in data protection in an international company, ideally in the new technologies sector (software, IT service provider).
• Degree in Law or a Security or IT background in France.
• Certification as a data protection professional is required.
• Expert knowledge of data protection law and practices, including the GDPR.
• Good knowledge of other areas relevant to the IT industry would be desirable, e.g. Security, IT contracts, Compliance.
• Excellent verbal and written communication skills in French and English. Additional languages are an advantage.
• Demonstrated strong analytical skills, including the ability to assess risk, conduct DPIAs and propose adequate security measures.
• International experience is appreciated.

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.

Choose your future. Choose Atos.

Read Full Description