Data Privacy Lead

Data Privacy Leader - Connected Products & Digital Services
Location: Grenoble - ideally 2 days per week on-site Travel: Up to 20%, potentially international Languages: Fluent French and English requiredContract duration: 6 months with potential extension

For our client, we are looking for an experienced Data Privacy Leader to take ownership of and strengthen the existing privacy programme.
Key responsibilities

Lead Privacy by Design activities across connected products, IoT and cloud services.
Review and update existing data-flow maps, processing records and privacy controls within the Secure Development Lifecycle.
Translate GDPR, EU Data Act and relevant AI obligations into clear technical requirements for Engineering teams.
Lead privacy assessments and DPIAs, define mitigations and maintain supporting evidence.
Challenge unnecessary data collection and review product and cloud architectures.
Support retention, deletion, data-subject rights, supplier assessments and international-transfer reviews.
Review personal-data use in AI and analytics applications.
Coordinate with Engineering, Product Management, Cybersecurity, Legal and the DPO.
Maintain privacy governance, action tracking, training materials and handover documentation.

Required profile

At least 7 years of privacy or data-protection experience, including 3 years leading implementation for digital products or services.
Experience with connected products, IoT, cloud platforms or similarly data-intensive environments.
Strong knowledge of GDPR, DPIAs and Privacy by Design.
Ability to understand and challenge technical architectures and convert legal obligations into actionable engineering requirements.
Experience working autonomously across legal, technical and business teams.
Experience with the EU Data Act, CNIL guidance, ISO/IEC 27701, AI-related processing, e-mobility, energy systems or industrial IoT is an advantage.

Initial priorities
During the first three months, the consultant will:

Take ownership of the existing privacy programme.
Review and consolidate current data-processing and data-flow documentation.
Assess privacy controls within the product development lifecycle.
Identify and prioritise improvements, with particular focus on GDPR and the EU Data Act.