Privacy Manager & DPO — Fractional

The role

The person will manage privacy activities and act as DPO. They will handle data processing registers, DPIAs, data breaches, and compliance monitoring for the company.

What you will do

• Photograph processing activities and organize the register
• Strengthen procedures for data breach management, DPIA, and DPA
• Monitor compliance with regulations, policies, and procedures
• Verify the completeness and accuracy of the processing activities register
• Provide opinions on impact assessments
• Manage relationships with the Garante and data subjects
• Manage data breaches with IT, Legal, and other functions
• Work with IT and Information Security on technical and organizational measures
• Design and deliver privacy awareness training
• Monitor regulatory evolution including NIS2, AI Act, and whistleblowing

Required qualifications

• At least 5 years of experience in Privacy, Data Protection or Information Security
• Deep knowledge of GDPR, Italian regulation (D.lgs. 196/2003 as modified by D.lgs. 101/2018) and Garante provisions
• Direct and documentable experience on DPIA, DPA, data breach, registers, information notices and policies
• Absence of conflicts of interest pursuant to art. 38(6) GDPR
• Partita IVA and professional civil liability insurance
• Fluent Italian and English

Nice to have

• Experience in high-volume B2C contexts
• Previous designation as DPO, preferably in multinational groups
• Experience in energy, utility or retail sector
• DPO certification according to accredited scheme or UNI 11697:2017 profile
• Familiarity with Modello Organizzativo ex D.Lgs. 231/2001 and whistleblowing regulation
• Having worked in an Italian branch responding to a foreign headquarters

Benefits

• Guaranteed volume of days during set-up phase
• Reimbursement of documented expenses agreed upon in advance
• Dedicated budget for training, tools and specialist in-depth studies
• Internal privacy contact person
• Direct access to top management and key functions
• Comparison with the international privacy expert network of the Enpal Group

Before you apply

• Absence of conflicts of interest to be attested at the time of appointment
• Availability to be contacted within 8 working hours in case of suspected data breach

About the company

Enpal is the number 1 green unicorn in Europe, founded in Berlin in 2017 and present in Italy since 2023. They help families achieve energy independence with photovoltaic, wallbox and heat pumps managed by proprietary digital technologies.