Part-time - 28 hours 

Responsibilities

Ensure that the Foundation complies with all relevant data protection and privacy legislation. Also ensure that the Foundation has appropriate risk-based control systems in place for the personal data it processes and for the documents that the HR department sends out or publishes.

Manage data protection compliance:

• Develop, update and enforce appropriate and relevant data protection policies.
• Act as point of contact for relevant data protection authorities
• Maintain a record of all personal data processing requests and activities within the Foundation and of all data security incidents and recommendations and corrective actions
• Ensure that Data Protection Impact Assessments and similar compliance measures are carried out in accordance with the law

Monitor data protection compliance:

• Verify compliance with all relevant laws and regulations, as well as corresponding internal policies, including review of compliance with these laws and regulations by third-party data processors engaged by the Foundation
• Develop and support the implementation and testing of IT security measures (cybersecurity), including monitoring of measures and development of an internal control system.
• Liaise with the Foundation's auditors for the annual audit, including the processing of personal data
• Provide comprehensive reports to management on the Foundation's data protection compliance, training and awareness.

Manage legal compliance:

• Oral/written legal advice to support the 3 campuses on legal issues, including employment law.
• Liaise with external lawyers on the Foundation's legal matters
• Reinforce the legal side of the HR department by drafting or checking documents (contracts, work certificates, agreements, emails, etc.)
• Take part in HR projects and ensure compliance with laws and internal rules
• Participate in the development and revision of internal regulations (policies, etc.)

Training and awareness :

• Provide training to staff to raise awareness and understanding of data protection and privacy issues, applicable laws and regulations, internal policies and best practices, and related responsibilities.
• Provide guidance to all sections of the Foundation, assessing issues, requests, procedures and practices.

Candidates requirements

• University degree in Swiss law
• At least three years' significant experience in this field, particularly in employment law.
• Solid and demonstrable understanding of the practical application of data protection legislation and other related regulations.
• Practical experience of auditing data management systems.
• Fluency (oral and written) in English and French.
• Specific training and/or certificates in the field of data protection and privacy or in one or more fields related to information security.
• A visible interest in IT is an asset.

Interested candidates are invited to apply online with their CV, three referees, of which one must be the current or most recent employer (who will be contacted in case of interview) and a letter of motivation addressed to Thomas Faure, Ecole Internationale de Genève, before October 3rd 2023, mentioning the reference number 130 162.