Senior Data Protection Analyst (GBTO)
Responsibilities
As part of the Data Management Office within Global Banking Technology and Operations (GBTO), you will contribute to 2 major regulatory and operational domains: GDPR compliance and Data Record Management (DRM). You will support the implementation of data protection strategies and lifecycle management across wholesale banking activities, ensuring alignment with Group policies and European or local regulations.
Your future scope of responsibility will cover:
GDPR & Data Privacy Compliance
Ensure operational compliance with the European General Data Protection Regulation (GDPR) and Schrems II requirements
Maintain and update the personal data processing register
Analyze risks related to personal data usage and cross-border data transfers
Support the implementation and review of Standard Contractual Clauses (SCCs) with external and internal partners
Review and support contractual clauses related to data privacy
Facilitate permanent supervision controls and contribute to GDPR compliance reporting
Support GDPR correspondents in European entities and subsidiaries subject to local data protection laws
Promote awareness and training on data protection topics (procedures, documentation, intranet content)
Contribute to the “Privacy by Design” and “Privacy by Default” integration in new projects
Data Record Management (DRM)
Represent GBTO in Group-level DRM initiatives and implement action plans aligned with SG’s data governance policies
Maintain and update the local data retention repository
Identify applications eligible for data purging and contribute to the annual DRM compliance roadmap
Provide expertise and support to IT teams on data retention and archiving rules (e.g., decommissioning, migration)
Support new projects to ensure compliance with DRM requirements
Contribute to DRM tooling in alignment with Group solutions and local needs
Promote DRM culture within GBTO through training and awareness sessions for Data Champions
Profile required
You have a minimum of 8 years of experience in cross-functional project management, ideally within banking or investment banking environments
You bring proven experience in GDPR compliance, data governance, or privacy-related initiatives
You are familiar with Schrems II, Standard Contractual Clauses (SCCs), and international data transfer regulations
You demonstrate strong stakeholder management skills and can effectively engage across multiple organizational levels
You are fluent in English and possess excellent communication skills, with the ability to clearly explain complex and technical topics
Experience with IT systems, cybersecurity, cloud environments, and data lifecycle management is considered an asset
Why join us
Your future with Societe Generale will include:
Work in a pleasant atmosphere as part of an international team in a brand-new office in the centre of Warsaw, designed with facilities for people with disabilities
An active role in an international structure and the opportunity for growth
Access to educational platforms and language courses
Stability
Competitive salary based on seniority and skills
Support in quick adaptation in the company
Extraordinary health package with extensive dental care
Hybrid work (2 days per week from home) and one-time bonus for home office equipment
Even more benefits such as meal allowance, holiday fund, sports card and insurance
*Please be informed that we will be accepting only resumes in English.
Business insight
At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.