Data Protection and Privacy Expert

Data Protection and Privacy Expert at UNIQA Insurance Group

As one of the leading insurance companies, UNIQA fosters a community for a better life. We invite you to bring your individual skills to shape a better future together. UNIQA IT Services GmbH (UITS), the IT service provider of the UNIQA Group, is looking for a Data Protection and Privacy Expert.

Your mission at UITS

You will ensure that data protection is consistently embedded across IT services, platforms, projects, and vendor ecosystems. Your role involves advising delivery teams and service owners, monitoring privacy compliance within UITS, and driving privacy-by-design throughout the entire IT lifecycle—from architecture and procurement to operations and incident response.

What To Expect

• Support the Data Protection Officer function for UITS in line with GDPR (Art. 37-39) and UNIQA governance, providing independent advice and oversight in IT services.
• Advise UITS teams on GDPR, Austrian DSG, and UNIQA privacy requirements.
• Implement privacy-by-design and privacy-by-default in IT service delivery, including solution design, data flow analyses, and defining privacy requirements for new services.
• Lead and review DPIAs and privacy risk assessments for IT services, platforms, and initiatives (e.g., cloud, identity platforms, outsourcing).
• Drive UITS privacy management system, maintaining policies, procedures, and ensuring audit readiness.
• Support third-party/vendor privacy assessments and drive data processing agreements (DPAs) in collaboration with Procurement & Legal.
• Handle data breach incidents and ensure documentation and notification compliance.
• Support data subject rights processes (DSARs) from an IT perspective (access, deletion, retention).
• Provide training and guidance to UITS teams on privacy requirements and technical controls.
• Collaborate with Group Privacy, Legal, Information Security, Risk, and DPOs across UNIQA Group.

What We Expect

• Several years of experience in data protection, privacy compliance, or privacy risk management, ideally in an IT/technology environment.
• Strong knowledge of GDPR, DPIAs, vendor/privacy assessments, and operational privacy controls.
• Experience working with technical teams on topics such as cloud and outsourcing models, IAM, logging/monitoring, data flows, encryption, retention and deletion, as well as SDLC and IT service management processes.
• Strong communication and facilitation skills with the ability to influence stakeholders.
• Structured, reliable, and discreet working style with high attention to detail.
• Fluent German (C1/C2) and very good English (written and spoken).
• Experience in insurance or financial services (regulated environments).
• Relevant certifications (e.g., CIPP/E, CIPM, ISO/IEC 27701).
• Experience in risk management, audit support, and control frameworks.
• Familiarity with Agile/SAFe ways of working.

UNIQA embraces diversity and fosters different perspectives. We welcome applications that enrich our diversity, particularly from women for leadership and technical positions. If you are unsure if you meet all requirements, we encourage you to apply!

Benefits

• Onboarding & Support: Comprehensive onboarding plan, welcome events, and a buddy system.
• Meals: Discounted DO&CO canteen and financial support for meals when working from home.
• Work Environment: Modern, bright office in the city center with break areas and modern IT equipment.
• Financial Security: Discounted insurance, company subsidies, and vouchers for various stores.
• Flexibility: Flexible working hours, possibility to work from home with a starter package, and remote work within the EU for up to 20 days/year.
• Commute: Optimal accessibility by public transport with 50% coverage of your annual ticket.
• Wellness & Development: Vaccination campaigns, check-ups, free coaching, and various training opportunities.
• Social Events: Numerous opportunities to network and celebrate, from summer parties to winter gatherings.

Key skills/competency

• Data Protection
• Privacy Compliance
• GDPR
• DPIA
• Risk Management
• IT Security
• Vendor Management
• Privacy-by-Design
• Data Breach Management
• Stakeholder Communication