Compliance Manager

Responsibilities

• Act as the single point of contact (SPOC) for all compliance-related activities within Workplace Management Services.
• Coordinate compliance activities across Data Protection, Labor Relations, Workers Council, Cybersecurity, Legal, Service Management, and Project Management teams.
• Ensure compliance with GDPR, local privacy regulations, workers council agreements, labor laws, and internal corporate policies.
• Lead the creation, review, maintenance, and approval of Data Protection Impact Assessments (DPIA).
• Lead the creation, review, maintenance, and approval of Records of Processing Activities (ROPA).
• Create and maintain Privacy Risk Assessments (PRA) and Security Protection Requirement Analyses (SBA).
• Develop and maintain data deletion and retention concepts for workplace services.
• Prepare and maintain information related to data subject rights and privacy notices.
• Coordinate and manage data subject access requests related to workplace technologies.
• Assess compliance impacts for new workplace services and modifications to existing services.
• Review and evaluate technology changes introduced by vendors, including Microsoft and third-party providers.
• Track Microsoft roadmap updates, release notes, and service enhancements for compliance implications.
• Identify compliance risks resulting from service updates and ensure timely remediation.
• Ensure all compliance documentation is updated prior to implementation of service changes.
• Lead workers council involvement processes for new services and service modifications.
• Prepare workers council documentation, presentations, reports, and supporting materials.
• Participate in workers council meetings, workshops, and negotiations in an advisory capacity.
• Coordinate with labor relations teams regarding workers council requirements and escalations.
• Ensure all required workers council approvals are obtained before service go‑live.
• Track and manage workers council action items and commitments.
• Escalate compliance issues, delays, or approval blockers to appropriate stakeholders.
• Create and maintain security concepts in cooperation with cybersecurity teams.
• Coordinate security assessments and security compliance reviews for workplace services.
• Open, manage, track, and close Technology Risks (TRISK) and other compliance‑related risks.
• Conduct compliance risk assessments for new technologies and business initiatives.
• Define corrective and preventive actions to address compliance gaps and findings.
• Monitor implementation and closure of compliance remediation activities.
• Develop governance frameworks, standards, policies, and operating procedures.
• Maintain compliance processes for workplace technologies and digital workplace services.
• Develop and update Fair Use Policies and acceptable use guidelines.
• Create and maintain governance documentation from technical and organizational perspectives.
• Produce regular compliance reports for management, labor relations, workers councils, and regulatory stakeholders.
• Prepare monthly, quarterly, and annual compliance status reports.
• Ensure audit readiness for internal audits, external audits, and regulatory reviews.
• Maintain evidence repositories and compliance documentation required for audits.
• Support auditors during audits and coordinate closure of audit findings.
• Develop and deliver compliance awareness sessions, user trainings, and governance workshops.
• Create user guidance documents, operational procedures, and compliance communications.
• Maintain a centralized backlog of open, ongoing, and completed compliance activities.
• Track compliance‑related KPIs and service performance metrics.
• Monitor service approval timelines and ensure compliance activities are completed within agreed SLAs.
• Ensure all workplace services are reviewed regularly for regulatory and compliance impacts.
• Drive continuous improvement initiatives to enhance compliance processes and governance effectiveness.
• Provide expert guidance on Microsoft 365, Microsoft Teams, Share Point, One Drive, Power Platform, Microsoft Copilot, Intune, Azure services, and Zscaler from a compliance perspective.
• Collaborate with enterprise architects and technical teams to ensure privacy‑by‑design and security‑by‑design principles are implemented.
• Support strategic workplace transformation initiatives while ensuring regulatory compliance.
• Maintain strong working relationships with internal and external stakeholders.
• Provide subject matter expertise during compliance investigations and incident reviews.
• Support executive management with compliance insights, risk assessments, and decision‑making recommendations.

Requirements

• Minimum 8–10 years of experience in Compliance, Governance, Risk, Privacy, Data Protection, or Regulatory Management.
• Strong experience with GDPR, privacy regulations, and compliance frameworks.
• Experience working with Workers Councils and Labor Relations organizations.
• Strong understanding of Microsoft 365 ecosystem and workplace technologies.
• Experience with DPIA, ROPA, PRA, SBA, and risk assessment methodologies.
• Strong stakeholder management and negotiation skills.
• Experience supporting audits and regulatory assessments.
• Strong documentation, reporting, and presentation skills.
• Excellent communication and coordination capabilities.
• Ability to manage multiple stakeholders and complex compliance initiatives simultaneously.
• #J-18808-Ljbffr