Data Protection Officer (DPO)

Short company description

Who we are?

We are Grant Thornton. We go beyond business as usual, so you can too. Grant Thornton Romania was founded in December 2010. During this period, our company has been continuously committed to providing quality and value services to clients. We are dedicated to serving the needs of privately held business and public interest companies delivering assurance, tax and advisory services. We approach all assignments by combining excellent consultancy services and dedicated, professional staff with experience at both local and international level. Over the last three years we are the fastest growing large accounting organization and we are constantly evolving and developing alongside our clients. Grant Thornton International is one of the world’s leading organizations of independent assurance, tax and advisory firms. With more than 80,000 Grant Thornton people, across over 150 countries, we are focused on making a difference to clients, colleagues and the communities in which we live and work.

What do we value?

We are a young team of professionals who have in common the Grant Thornton core values: Collaboration, Agility, Respect, Excellence

Here at Grant Thornton, we like to think big!

Requirements

We are looking for a Data Protection Officer (DPO) to join our team, serve as the firm''''s designated DPO, and help strengthen how we protect and manage data.

This opportunity suits a professional who can connect data protection requirements with how information is used in practice. You will work across privacy, data governance, and technology, helping teams navigate data flows, digital systems, and emerging challenges such as AI.

You will work closely with colleagues across Legal, Risk, HR, Operations, IT, and Information Security, with direct access to senior management and the independence to provide clear, practical advice.

Qualifications and experience:

University degree in Law, Economics, or Information Technology.

DPO certification or an equivalent professional qualification in data protection.

Hands-on data protection experience and confidence in advising colleagues and assessing privacy risks.

Strong working knowledge of GDPR and Romanian data protection requirements. Knowledge of cybersecurity legislation would be an advantage.

Experience in professional services or a regulated environment would be an advantage.

Practical understanding of how data moves through digital systems, including access, sharing, storage, retention, and deletion, and the ability to work effectively with IT and Information Security teams.

Familiarity with Microsoft 365 environments, cloud applications, and business systems.

Experience in privacy reviews, DPIAs, and data protection policy development; experience in compliance audits would be an advantage.

Excellent analytical, organizational, and communication skills.

Sound judgement, discretion, and the confidence to challenge constructively and explain complex issues clearly.

Fluent English.

Responsibilities

Key responsibilities:


GDPR & Data Privacy


Provide practical GDPR advice, review compliance, and recommend improvements to policies and working practices.

Guide teams through Data Protection Impact Assessments (DPIAs), including for AI-related projects, and review the outcomes.

Act as the firm''''s point of contact for the Romanian data protection authority (ANSPDCP) and individuals on privacy matters.

Advise on privacy by design and default in new initiatives, processes, and technologies, and review privacy notices, supplier arrangements, and international data transfers.

Advise on data subject requests and complaints, and monitor their timely handling by the responsible teams.

Help shape responsible AI use by advising on privacy risks and contributing to the firm''''s AI governance framework.

Keep senior management informed of key privacy risks, priorities, and recommended actions.

Data Governance & Data Integrity


Promote data quality, accuracy, consistency, and reliability across business processes.

Maintain records of processing activities and data inventories.

Map data flows and maintain oversight of how key data is collected, stored, transferred, retained, and disposed of across the organization.

Help teams apply clear standards for data ownership, classification, retention, and responsible handling.

Deliver training and awareness initiatives to improve data literacy and responsible data handling practices across the firm.

Technology, Information Security & Incident Management


Work closely with IT and Information Security teams to understand systems, applications, databases, and cloud-based platforms from a privacy and governance perspective.

Work with relevant teams on data incidents and breaches, advising on privacy risks, documentation, escalation, and notification requirements.

Monitor governance requirements relating to information assets and business data.

Contribute to risk assessments involving technology, information management, and emerging technologies.

Other info

What we offer

Flexible benefits package within an allocated monthly budget;

Private medical subscription, with the possibility of including family members at preferential rates, and accident insurance;

Continuous learning opportunities, technical training and professional mentoring;

Financial support for relevant professional qualifications and certifications, in accordance with internal policies;

Access to professional resources and knowledge-sharing opportunities within the Grant Thornton international network;

Additional days of annual leave, in accordance with internal policies;

Clear opportunities for professional growth and career advancement based on performance and individual development.

Grow your career with Grant Thornton Romania!

Join a team where your contribution matters, your professional development is supported and you have the opportunity to work on challenging projects alongside experienced professionals.

We look forward to receiving your application!

Benefits

• Performance bonus
• Medical subscription
• Trainings
• Courses
• Certifications
• Choose your benefits within a maximum budget
• Extra days off
• Teambuildings / trips
• Parties / company events
• Meal vouchers