Data Protection Officer

We help the world run better
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

PURPOSE AND OBJECTIVES

When processing personal data as part of its business operations, SAP must comply with the requirements of the EU’s General Data Protection Regulation (GDPR) and other applicable data protection and privacy laws in the countries where SAP operates.

To support the local SAP entities in meeting their data protection and privacy compliance obligations, SAP has established a global network of Data Protection and Privacy Coordinators (DPPC’s). This network consists of local DPPC’s that report to the management of the SAP entities by which they are hired and regional DPPC’s that are part of SAP’s global Data Protection & Privacy team reporting to SAP’s Group Data Protection Officer.

We are looking for a local Data Protection Officer for Greater China, including support as local Data Protection and Privacy Coordinator (DPPC) for Korea and Japan.

EXPECTATIONS AND TASKS

The China Data Protection Officer (DPO) is responsible for ensuring the organization's compliance with China's data protection regulations and supporting local compliance with GDPR and other global data protection regulations. This role involves collaborating closely with the global data protection and privacy team, local business units, and external stakeholders to manage data protection risks and drive data protection and privacy awareness across the organization.

Key Responsibilities:

Regulatory Compliance:

• Ensure compliance with Chinese data protection and privacy laws, GDPR, and other relevant regulations.
• Monitor and interpret changes in data protection legislation, regulations, and industry standards.
• Provide timely updates and guidance on regulatory developments and best practices.

Communication and Collaboration:

• Serve as a subject matter expert, advising the executive board and cross-functional teams on data protection and privacy matters.
• Collaborate with stakeholders, including the local CFO, to ensure compliance and risk management.
• Communicate effectively with authorities and external stakeholders.

 Driving Awareness and Training:

• Develop and deliver training programs to build data protection and privacy awareness across business units.
• Ensure that all employees understand their roles and responsibilities in protecting data.

 Compliance Monitoring and Reporting:

• Monitor compliance with data protection policies and procedures.
• Analyze changes in local laws and provide gap analysis and support local implementation projects
• Conduct data protection audits and assessments to identify and mitigate risks.
• Prepare and submit reports on compliance status to the global data protection team and local executives.

 Advisory Role:

• Advise on the development and implementation of data protection and privacy policies, standards, and procedures.
• Provide legal and compliance advice on data protection issues and conduct impact assessments for new projects and initiatives.
• Assist the local Chief Finance Officer (CFO) for their assigned region in meeting their responsibility for GDPR topics, local data protection topics and dedicated processes of the legal entity,
• Represent SAP’s Group Data Protection Officer (DPO) within the assigned region based on the instructions given by the DPP team
• Help strengthen the global data protection community within SAP
• Support in a case of
  • supervisory authority requests
  • data breaches,
  • escalations triggered by a data subject or
  • any other control requests
• Support the creation of local data protection policies or standards in your assigned region
• Harmonize documentation, processes, and overall data protection approach for your assigned region in close alignment with DPP

EDUCATION AND QUALIFICATIONS / SKILLS AND COMPETENCIES

Required skills

• University degree in law
• Proven experience as a Data Protection Officer or in a similar role
• Familiarity with GDPR and other relevant global data protection regulations.
• Good project management skills
• Strong written and presentation skills
• Strong communication skill even on C-level
• Ability to communicate complex legal and technical concepts to non-specialists.
• Good team-working skills

Interpersonal Skills:

• Strong interpersonal skills to effectively collaborate with diverse global teams.
• Ability to build and maintain relationships with internal and external stakeholders.

 Additional Skills:

• Strong analytical and problem-solving skills.
• Ability to work independently and manage multiple priorities.
• Knowledge of information technology and data protection tools.

 Preferred skills

• Fluency in Chinese (Mandarin) and English is essential.
• Proficiency in any additional language would be beneficial.
• Location: Beijing or Shanghai

AI Usage in the Recruitment Process

For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.

Please note that any violation of these guidelines may result in disqualification from the hiring process.
Requisition ID: 458379  | Work Area: Administration  | Expected Travel: 0 - 10%  | Career Status: Professional  | Employment Type: Regular Full Time   | Additional Locations:  #LI-Hybrid