Legal & Compliance Expert

Legal & Compliance Expert

location: Kraków/ hybrid

At HEINEKEN Kraków (HEINEKEN Global Shared Services) our success comes directly from our great people. We are a growing team of business experts in finance, accounting, data and technology ready to „WOW” the world with our expertise, passion and pride to be GREEN. We act on our values of Passion for consumers & customers, Courage to dream & pioneer, Care for people & planet, Enjoyment of Life, always focused on being ourselves: inclusive, diverse, and open for new challenges.

🔍 Your daily tasks may include:

👉 Data Privacy:

• providing SME advisory, proposing solutions, and comprehensively coordinating around privacy and data protection
• ensuring alignment of local procedures and policies with EU and Polish regulations and HEINEKEN internal policies
• coordinating the delivery of PIA/DPIA between the L&C function, requestor, and external GDPR consultant. Assessing and approving PIA/DPIA prepared by requestors or proposing relevant mitigating actions as necessary
• ensuring GDPR compliance by actively participating in projects linked with personal data processing and providing advice on GDPR requirements and possible solutions, such as privacy by design, privacy by default, data minimization, and data retention ect.
• keeping an up-to-date register of personal data processing activities and a register of categories of processing activities
• coordinating the preparation of DPAs, tracking changes, and verifying proposals
• driving the data breach investigation process, including assessments, reporting, and internal or external communication if necessary
• investigating and replying to data subject right requests under GDPR
• establishing and maintaining a strong work relationship with internal business owners, the global privacy function, and external GDPR consultant to identify data privacy risks and deliver solutions to mitigate those risks.

👉 Legal process:

• coordinating and validating legal and compliance checks for 3rd party agreements process. Cooperating with the Procurement Officer, external legal advisor, L&C Manager, Finance Manager, and requestors as necessary
• monitoring, assessing, and providing recommendations and plans on new regulatory developments
• designing and implementing relevant local controls, policies, and procedures to ensure compliance with applicable local laws and regulations and HEINEKEN Group rules and guidelines.

👉 Risk Assessment:

• providing input for the periodical risk assessment process run by the internal control function around L&C
• identifying new risks, proposing a mitigating action plan, executing mitigating actions, and reporting as required on the progress to the L&C Manager and internal control function.

🔍 You are a good match if you have:

• high degree of personal integrity with sounded business judgement
• extensive knowledge and experience in the practical application of GDPR in corporate environment (min. 3 years). Overall previous experience in Legal, Compliance, Audit field – min. 5 years
• very good knowledge of the GDPR legislation and experience in implementing GDPR compliance programmes. Knowledge about other compliance relevant legislations and experience in implementing (e.g., Labour law) will be an advantage
• ability to develop a detailed understanding of the business and external risks
• demonstrated effectiveness operating in complex organisational environments
• good investigative skills, prepared to challenge and stand their ground
• excellent written and oral communication skills in English
• preferably master’s degree in law.

🔍 What we offer:

🏠 Flexible Work from Home scheme

💸 Attractive Performance Bonus

🚗 Parking Space for Employees

⏰ Flexible working hours

💳 Sodexo Card

☂ Life Insurance

➕ Employee Referral Programme

🌐 Job Opportunities within HEINEKEN

🩺 Private Medical Healthcare

⭐ Social Events