Data Privacy Consultant

Role: Data Protection & Privacy Consultant / DPO Support

Location: Malmo, SE

Type: Contract

Job Description:

We are looking for an experienced Data Protection & Privacy Consultant . The consultant will work closely with an experienced privacy team and collaborate with stakeholders across Cyber Security & Privacy, Risk & Compliance, Digital, AI Governance, Marketing, People & Culture and other business functions .

The assignment focuses on providing day-to-day operational and advisory support across data protection and privacy matters in a complex, international business environment.

The consultant will support the existing DPO function and will not act as the formally registered DPO for any legal entity or represent a legal entity before data protection authorities .

Key responsibilities

• Provide advice and support to business stakeholders and legal entities regarding applicable data protection and privacy requirements.
• Advise on and monitor Data Protection Impact Assessments (DPIAs) and related privacy assessment processes.
• Support the maintenance and development of Records of Processing Activities (ROPA) .
• Provide advice and support regarding data subject rights and individual rights requests .
• Support the assessment and management of personal data breaches and privacy incidents .
• Review and advise on third-party data processing arrangements, data processing agreements and privacy requirements in supplier relationships .
• Conduct privacy compliance reviews and identify gaps in the implementation of privacy controls.
• Support the development of privacy guidance, training, awareness activities and process improvements .
• Contribute to privacy-by-design activities across business processes, products and technology.
• Prepare clear and concise management reporting and decision material for senior stakeholders.
• Monitor relevant developments in data protection legislation, regulatory guidance and enforcement practice.
• Work collaboratively with legal, technology, security, compliance and business teams to translate regulatory requirements into practical solutions.

Required experience

• Master's degree in Law, Business, IT or a related discipline , or equivalent professional experience.
• Relevant professional experience in data protection and privacy, preferably within a large multinational organization.
• Demonstrated experience working as a DPO, Privacy Officer or senior data protection/privacy advisor .
• Strong practical knowledge of EU GDPR and European data protection requirements , including regulatory guidance and enforcement practice.
• Practical experience with DPIAs, ROPA, data subject rights, personal data breaches, third-party risk and data processing agreements .
• Experience embedding privacy by design and privacy controls into business and technology processes.
• Strong legal drafting and analytical skills, combined with the ability to provide pragmatic business advice.
• Excellent stakeholder management and communication skills, with the ability to explain complex privacy requirements to both technical and non-technical audiences.
• Structured, analytical and result-oriented approach , with the ability to manage multiple priorities in a complex organization.
• Passion for data protection, privacy, technology and responsible use of data .
• Relevant professional certifications such as CIPP/E, CIPM, AIGP or equivalent are highly desirable.

Nice to have

• Experience with EU digital and technology regulation , such as the AI Act, Digital Services Act, Accessibility Act and related consumer/digital legislation.
• Experience with cybersecurity regulation , including NIS2 and the Cyber Resilience Act.
• Experience in Digital, AdTech, MarTech, e-commerce, cookies, tracking technologies, consent management or data preference solutions .
• Experience in retail, consumer-facing or manufacturing environments .
• Knowledge of AI governance, data management and cybersecurity .
• Familiarity with frameworks and standards such as ISO 27701, ISO 27001, SOC and NIST .
• International privacy experience across multiple jurisdictions, including the US, China and/or India .