Risk Manager

Worten, a Sonae electronics retail brand, is, in our DNA, a digital company, with physical stores and a human touch, and market leaders in our business area. Our mission is to bring the best of technology (and more) to everyone. With the country's largest e-commerce site and over 240 stores in Portugal and Spain, we always remain close to customers, offering low prices, personalized service, variety of products, and also services, with the aim of meeting their needs and expectations. Always.

We are an inclusive employer that promotes a culture of innovation, diversity, sharing, transparency, and teamwork because we believe that this way we achieve better results. We want there to be equal opportunities for all people.

The Legal Department's mission is to provide legal support across Worten's various areas, ensuring legal requirements in various fields of activity.

Your day-to-day:

• Monitoring indicators of right exercises and support in resolving customer or partner complaints about personal data privacy;

• Developing training content and providing training/training actions regarding personal data protection;

• Elaborating recommendations within the scope of processes, systems, and projects for compliance with Personal Data Protection requirements in alignment with the data controllers;

• Reviewing Normative Body and control documents (RAT, DPIA, etc.) for regulatory/supervisory entities of Data Protection;

• Assessing and monitoring Risks related to Personal Data Privacy in Business and supporting the definition of mitigation measures with the data controllers;

• Handling Data Protection incidents: registration, assessment, and definition of a mitigation plan with the Business and communication to data subjects and regulatory entities;

• Elaborating Critical Data Protection Risk Opinions (checkbalance etc);

• Monitoring risk & compliance projects within IT and Data legislation;

• Designing internal controls for risk assessment and compliance with legal requirements.

What we are looking for:

• Higher Education in Management, Information Systems, Risk Management Analysis and Auditing, or similar;

• Minimum of 5 years of professional experience in the area of implementation, organization, and risk management of process, quality, and compliance;

• Professional experience in conducting internal audits and monitoring external audits, as well as in the elaboration, management, and implementation of corrective action plans;

• Certified training in General Data Protection Regulation (plus);

• Solid knowledge of the General Data Protection Regulation (GDPR), AI Act, and NIS2;

• Business vision and technical knowledge of processes and functional and security requirements in compliance with the European and national regulatory framework on topics within its competence;

• Ease of communication and interpersonal relationship;

• Autonomy, proactivity, and critical sense.

What we offer:

• Hybrid Work Model (current regime in force of 2 days in person and 3 days remote).

• Shuttle to headquarters with several collection points in Greater Lisbon;

• Practices that help you balance your personal and professional life, namely 2 extra vacation days, study incentives, flexible hours depending on the function, among others;

• Diversity and Inclusion Practices with a focus on Parental Protection, Gender Equality, People with disabilities, and Work-Life Balance;

• Growth opportunities through initial and continuous training appropriate to your needs and goals.

• Advantages all year round in various areas and partners.

Learn more in the area of benefits and advantages.

Where we are:

• Present in several locations and headquartered in the World Trade Center building.

Learn more in the area where we are.

When you think you know everything, you discover more at Worten. Apply now!