Chief Data Office Protection Analyst

Act as a Chief Data Office Protection Analyst (CDOPA), ensuring compliance of personal data processing activities with GDPR and Group requirements, and supporting the effective implementation of data protection principles, including alignment with data lifecycle and records management practices.

The role contributes to privacy governance and to the control of personal data–related risks, ensuring consistency of practices across the personal data lifecycle, in coordination with relevant stakeholders.

The scope of CDOPA’s responsibilities may be extended to include the protection of non‑personal data, to address security and regulatory compliance requirements (e.g. Insider information, banking secrecy…).

RESPONSIBILITIES

1. GDPR Operational Support

• Support project and operational teams in qualifying personal data processing activities and identifying appropriate data protection measures.

• Provide GDPR expertise on new processes, projects, tools, application evolutions, and outsourcing initiatives.

• Contribute to the resolution of complex privacy issues related to innovative uses or technologies.

• Support business teams in the closure of NFAs within MyActions.

2. Processing Records and GDPR Analyses

• Maintain and instruct the Record of Processing Activities (DPR / RoPA) for the relevant entity.

• Perform or coordinate required analyses, including PIA/DPIA, TIA, data flow analyses, and LIA where applicable.

• Ensure completeness, accuracy, consistency, and ongoing relevance of documentation, in coordination with all relevant stakeholders.

3. Governance and Controls – First Line of Defence

• Contribute to the personal data protection governance and internal control framework.

• Perform ongoing First Line of Defence (LoD1) controls across the assigned scope.

• Ensure effective application of GDPR principles, including data minimisation and storage limitation.

• Identify, document, and escalate risks and non‑compliance situations.

• Contribute to ensuring consistency between GDPR requirements and data retention, archiving and deletion practices.

4. Coordination, Reporting, and Stakeholder Interaction

• Provide regular visibility to the PRU GDPR Team Manager on GDPR compliance status, risks, and action plans.

• Support CDOs in implementing and monitoring Group requirements and controls by delivering a consolidated view of the Service Unit’s GDPR activities.

• Interact regularly with IT, Security, Risk, Legal and Business teams, and coordinate closely with the Data Protection Officer (LoD2) within a complementary Three Lines of Defence approach.

• Coordinate with PRU team to ensure alignment between GDPR obligations and records lifecycle practices.

• Rigor, accuracy, and strong organizational skills;
• Analytical thinking and capacity for synthesis;
• Autonomy and good priority management;
• Curiosity, proactivity, adaptability;
• Tenacity and resilience;
• Strong team spirit and collaboration mindset;
• Excellent oral and written communication in French and English;
• Active listening and client‑oriented approach;
• Good mastery of Microsoft Office and willingness to learn specific privacy tools.

Here, you will find a flexible workplace and culture, autonomy, constant learning opportunities, dynamism, and talented people, making this experience a real career accelerator. You will also discover all the diversity of our businesses, in a sector that is constantly evolving and innovating.

Plus, you will enjoy all our benefits:

• competitive compensation & remuneration, including annual performance bonus;
• preventive healthcare plan, and group health & life insurance;
• wide range of flexible benefits within a monthly budget;
• office perks, wellbeing and mental health programs;
• various social benefits and bonuses for personal or family events;
• 9-to-5 workday & flexible (hybrid) work environment;
• additional paid and unpaid time off, including Sabbatical leave;
• learning and growth opportunities based on individual development and career plans;
• unlimited access to various eLearning resources.

We are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years, or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA.

If you too want to be directly involved, grow in a stimulating and caring environment, feel useful daily and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are an equal opportunities employer, and we are proud to make diversity a strength for our company. Societe Generale is committed to recognizing and promoting all talents, regardless of their beliefs, age, disability, parental status, ethnic origin, nationality, sexual or gender identity, sexual orientation, membership of a political, religious, trade union or minority organisation, or any other characteristic that could be subject to discrimination.