Compliance Officer

About the role

Kempinski seeks a dedicated Compliance Officer to lead privacy and data protection initiatives across its global portfolio of luxury hotels. You will safeguard guest and employee information, ensuring the brand’s reputation is protected through rigorous ethical and legal standards.

Key responsibilities

• Draft, update, and implement data protection policies, standards, and procedures tailored to the hospitality sector.
• Maintain comprehensive Records of Processing Activities (ROPA) for corporate and property functions.
• Monitor GDPR and other privacy law compliance through regular gap analyses and internal audits.
• Lead Data Protection Impact Assessments (DPIAs) for new technologies, loyalty programs, and marketing initiatives.
• Evaluate third‑party vendors, ensuring Data Processing Agreements (DPAs) are in place.
• Provide expert privacy guidance and design training programs for staff worldwide.
• Oversee Data Subject Access Requests (DSARs) and “Right to be Forgotten” queries.
• Lead incident response for data breaches, coordinating notifications and post‑mortem analyses.

Required profile

• Relevant higher education (e.g., Bachelor’s degree) in law, information security, or a related field.
• Proven experience in data privacy, preferably within hospitality or a similarly regulated industry.
• Strong understanding of GDPR and other international privacy regulations.

Required skills

• Knowledge of GDPR compliance frameworks.
• Experience conducting DPIAs and managing ROPA.
• Ability to draft and enforce data protection policies.