Risk & Data Protection Officer

1. Operational Compliance and Data Protection Support

• Support the organization in meeting privacy and compliance obligations within Care and Product.
• Act as the first operational point of contact (in addition to the CO/DPO) for compliance and GDPR-related questions.
• Ensure consistent application of internal guidelines, procedures, and SOPs.
• Prepare, follow-up and file legal documents and contracts into the contract management tool 
  
  

2. Monitoring, Signaling, and Risk Management

• Identify deviations, risks, and potential non‑compliance within processes, projects, and activities.
• Initiating timely actions, information requests, and follow‑up steps toward relevant stakeholders.
• Contributing to a preventive and risk‑based compliance approach

3. Data Breach and Incident Management

• Fully manage and keep the data breach register up to date.
• Coordinate substantive follow‑up of (potential) data breaches, including documentation and internal alignment.
• Ensure that incidents are assessed, recorded, and followed up in accordance with GDPR requirements.
• Ensure accurate, complete, and consistent transfer and safeguarding of information in PrIME
   

4. Contract & Data Management

• Manage and update the register (Product & Care).
• Ensure accurate, complete, and consistent transfer and safeguarding of information in PrIME.
• Monitor alignment between the processing register, operational practice and policy
   

5. Policy Development and Documentation

• Prepare, update, and maintain:
  • Compliance and privacy policies.
  • Procedures.
  • Supporting documentation (IMS/Zenya).
• Ensure documentation is practical, applicable, and up to date, tailored to Care and Product activities.

6. Implementation of Compliance Frameworks

• Supporting the implementation of Organizational Guidelines
• Translate policy frameworks into concrete actions, processes, and tooling.
• Monitor progress, consistency, and organizational embedding.
   

7. External Alignment and Assurance

• Participate in relevant external compliance forums (Nefemed, beMedTech) in the absence of the DPO/CO.
• Provide targeted and efficient feedback on relevant developments.
• Contribute to knowledge building and awareness within the organization.
   

8. Advisory and Support Role
 

• Provide structured input, signal improvement opportunities and propose operational actions.
• Support decision-making processes by preparing analyses and documentation.
• Escalate matters requiring legal interpretation or decision-making to Legal Counsel.

Education/ProfessionaI experience

• HBO (For example: Law or Communication)
• Experience in a commercial-oriented environment is a plus

Necessary skills & attitude

• Proactive and assertive in follow-up and execution.
• Strong ownership of tasks and deliverables.
• Able to independently structure and drive operational processes.
• Comfortable with escalation and stakeholder management.
• Works with a high degree of autonomy within a clearly defined mandate. 

Knowledge

• Good knowledge Word, PPT and Excel
• Excellent written and spoken Dutch and English skills