For Rabobank Utrecht, we are looking for a Privacy Officer for C-Domains.

Rabobank is a cooperative bank with over 8,5 million customers. Through large and small initiatives,
the bank aims to make the world a little bit better. They support local enterprises and larger 
non-profit organisations and thus contribute to the welfare and prosperity of the community. 

Job Description
2nd line Privacy Oversight Officer for C-Domains. Would you like to contribute to the data 
protection of Rabobank worldwide? As a member of the Data Privacy Oversight (DOS) team which is 
part of the 2nd line Global Privacy Office (GPO) you will collaborate and align with the privacy 
coordinators and experts around the globe!

You and your job
DOS is responsible for monitoring compliance with the GDPR and oversight on the risk management 
cycle regarding privacy risks and controls, across the Rabobank organization. This includes 
reporting of advises and opinions to the DPO, responsible management of Rabobank Group and other 
stakeholders.
When you work with DOS you should have a broad and general interest in Privacy Compliance and Risk
management to be able to support the Data Protection Officer in her regulatory tasks under the GDPR.

DOS is looking for a new colleague to strengthen the DOS team, who will primarily be responsible for 
oversight on the C-Domains (CRO, CEO, CFO and CHRO).

As a Privacy Officer/Expert you contribute by supporting the GPO (2nd line) in exercising her 
regulatory oversight tasks, and in informing, advising and issuing recommendations to the 
organization.
Using your expertise, knowledge and skills, you make sure that Rabobank processes, retains and 
disposes records in line with internal and external guidelines, protects personal data and acts 
within the legal and ethical boundaries. 

Top 3 responsibilities:
- Main point of contact for monitoring, oversight and reporting for all C-domains including related 
  expert privacy questions for both colleagues, compliance advisors and business;
- Establishing regular contacts with both senior management and compliance advisors to get a full 
  picture of the IT domains and the subsidiaries;- Advice on DPIAs and answer specific questions in 
  the area of C-Domains that touch on privacy aspects relevant for these domains, such as AI and 
  data driven models.