Compliance and Privacy Junior Specialist (Temporary Contract)

Context and purpose

The Compliance and Privacy Junior Specialist will join the Legal Department, supporting the Head of Compliance and working closely with the Group Data Protection Officer (DPO) and the Compliance team. The role involves contributing to the implementation, maintenance, and continuous improvement of the company’s compliance and privacy frameworks, with a focus on the Organisational, Management and Control Model pursuant to Legislative Decree 231/2001, data protection compliance, regulatory adherence and the effective management of compliance and privacy-related matters.

Key Responsibilities

• Contribute to drafting, reviewing, and updating compliance and privacy policies, procedures, and guidelines, proactively promoting any actions necessary to strengthen and ensure compliance


• Support the update and implementation of the Organisational, Management and Control Model pursuant to Legislative Decree 231/2001, including the mapping of sensitive activities and the collection of information flows to the Supervisory Body (Organismo di Vigilanza)


• Carry out compliance due diligence on third parties (e.g. suppliers, distributors, and business partners), including international sanctions screening


• Contribute to the review of contracts and business initiatives from a compliance and data protection perspective


• Identify and document the company’s data processing activities and maintain and update the Records of Processing Activities, Data Breaches, AI Register


• Support the management of data subject requests and personal data breaches within the deadlines established by applicable laws and regulations


• Work cross-functionally with key business departments to support the implementation of compliance and privacy requirements


• Contribute to organizing and delivering internal compliance and privacy training initiatives for employees

Requirements

• Master’s degree in Law, Economics or related disciplines; for non-law backgrounds, a postgraduate qualification or certification in compliance or data protection is required


• Knowledge of Legislative Decree 231/2001 and of the main compliance frameworks (e.g. anti-corruption, whistleblowing, international sanctions)


• Knowledge of the General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and Italian data protection laws and familiarity with the EU AI Act


• 1/2 years of relevant experience in compliance and data protection, gained in a law firm, consulting firm, or in-house within a structured organisation


• Excellent written and spoken English


• Advanced proficiency in Microsoft Office and practical knowledge of AI tools (e.g. generative AI assistants) to support daily activities


• Strong communication and interpersonal skills, attention to detail, accuracy, problem-solving skills, flexibility, goal orientation, and a high sense of confidentiality and integrity

The base salary range for this position is 26.000 - 30.000 euros, CCNL Terziario, Distribuzione e Servizi.

We promote diversity and inclusion in all forms, within a collaborative environment where your talent can flourish in the pursuit of a common goal: yours and our growth.