CONSULTANT DATA PRIVACY M/F - Casablanca
IT / Electronics - Secteur IT (Information Technology)
- Senior (5 to 10 years)
- 1 job(s) in Casablanca and region - Morocco
- Master or PhD Minimum - Engineering School
Search for new things / novelty Need for reflection Need for autonomy Involvement at work Ambition
- Permanent contract
- Teleworking : Hybrid
Company :
Are you looking for new challenges and want to give your career a new boost? Join Sofrecom, a company where agility, boldness, and teamwork are at the heart of our culture, and where everyone can thrive fully.
A subsidiary of the Orange group, Sofrecom is a consulting and engineering company specialized in telecommunications. We support our clients in their digital transformation by helping them anticipate technological changes, adapt their activities, modernize their organizations, and develop sustainable and high-performing solutions.
With over 3,000 consultants and experts from 34 nationalities and located in 9 offices worldwide, Sofrecom relies on the richness of backgrounds and talents to drive innovation and aim for excellence.
Our company culture values an inclusive, diverse, and equitable environment where each person is encouraged to thrive fully. We support the integration of young talents, assist the development of experienced employees, and promote professional equality for all. We are also committed to creating conditions conducive to the full participation of people with disabilities. Thus, everyone can develop their skills, contribute actively, and progress in their career, in a supportive, stimulating, and diversity-respecting environment.
Joining Sofrecom means participating in exciting projects, exploring diverse career paths, and evolving in an environment that values your ideas, skills, and ambitions.
Apply now and join a place where everyone can express themselves freely and find their place.
All personal data shared with Sofrecom Services Maroc are processed in accordance with law n° 09 08 relating to the protection of personal data. To exercise your rights of access, rectification or opposition, please contact HR at 05 37 27 99 00.
Together, we contribute to the development of digital technology worldwide!
Ce que nos collaborateurs aiment le plus chez nous ❤ : Pour consulter leurs avis certifiés
Company culture :
Job :
As part of the Cyber Threats Mitigation Crash Program launched to strengthen the cybersecurity and resilience of Orange Middle East and Africa (OMEA), a specific component is dedicated to Personal Data Protection. This aims to enhance OMEA subsidiaries' capacity to prevent, qualify, document, and manage personal data breaches in the context of cyberattacks or operational crises.
Within the DPO Office OMEA, and in close collaboration with MEA-Sec, local legal departments, cybersecurity teams, BCCM, IT/Network, and communication departments, the consultant will contribute for 12 months to the design, structuring, deployment, and operational management of this program in the OMEA region.
The consultant will primarily focus on the following crash program workstreams:
• Data Privacy Playbook ;• Privacy-by-design ;• Data Loss Prevention ;• Data Breach Response PlanDescription of activitiesThe consultant's main activities are as follows:1. Structuring the Data Privacy Program
- Contribute to the scoping, governance, and management of the Personal Data Protection component of the OMEA crash program.
- Define, with the OMEA DPO and MEA-Sec, the roadmap, priorities, milestones, and monitoring indicators.
- Prepare management materials, reports, dashboards, and follow-up committees.
2. Data Privacy Playbook / Crisis Management
- Design and formalize a Data Privacy Playbook applicable to OMEA subsidiaries in case of a cyber incident affecting personal data.
- Define roles, responsibilities, escalation procedures, and RACI matrices between DPO, cybersecurity, legal, communication, customer service, and management.
- Develop operational models (breach register; notification decision tree; notification templates for authorities / affected individuals / clients / partners; FAQ and crisis communication talking points).
3. Data Breach Response Plan
- Build a personal data breach response plan integrated into cyber crisis management.
- Define workflows for qualification, risk assessment, documentation, evidence preservation, notification, and lessons learned.
- Prepare and conduct crisis exercises/simulations, including a data exfiltration or disclosure scenario.
4. Privacy by Design / Data Governance
- Contribute to integrating privacy by design and by default requirements into subsidiaries' projects, applications, repositories, and document sharing.
- Formalize minimum requirements for data minimization, access control, need-to-know principle, retention, and document classification.
- Provide tools or strengthen Privacy Risk Assessment reviews for priority cases.
5. Data Loss Prevention / Exposure Mapping
- Contribute to the functional definition of the Data Loss Prevention workstream regarding data protection.
- Participate in defining detection and prevention rules for personal data leaks or sensitive document exposure.
6. Operational Support to Subsidiaries
- Provide expert support to OMEA entities in qualifying their local data protection challenges.
- Assist priority subsidiaries in implementing the program's deliverables.
- Help with gap analysis, defining remediation plans, and maturity improvement.
7. Incident Management / Crisis Management
- Support the DPO Office OMEA in handling significant personal data incidents or breaches in the region.
- Participate, if necessary, in crisis management teams for data protection, notification, communication, and relations with authorities/clients.
- Ensure consistency between local regulatory requirements, Group policies, and operational imperatives.
8. Awareness, Documentation, and Change Management
- Design or enhance awareness and training kits on personal data breaches; DPO/cyber reflexes during crises; personal data qualification; notification obligations.
- Contribute to spreading best practices across the entire OMEA region.
- Participate in capitalizing on lessons learned (RETEX) and continuous improvement of the system.
Required profile :
Master's degree level in Law, Data Protection, Cybersecurity, Risk Management, or equivalent field.
Significant experience, ideally 5 years or more, in one or more of the following areas: personal data protection; cyber crisis management; privacy/GDPR compliance; information security; risk governance; compliance or transformation projects.
Very good command of personal data protection principles and frameworks.
Solid understanding of personal data breach and notification issues.
Ability to translate legal requirements into operational processes.
Good understanding of IT, cybersecurity, IT architecture, document management, data flows, and security tools environments.
Appreciated experience in areas such as: privacy by design; DLP; PIA/DPIA; information classification; incident response; crisis management; telecom/mobile financial services/sectoral regulation.
Ability to work in an international, multicultural, and multi-stakeholder environment.
Very good writing, synthesis, and communication skills.
Comfortable with transversal facilitation, workshop management, deliverable formalization, and management reporting.
Head office address :
Batiment B0, 2 éme Etage, Technopolis, 11100, Sale Al Jadida, Rabat-Salé-Zemmour-Zaër, Maroc 11 100 Rabat
Desired personality traits :
Search for new things / novelty Need for reflection Need for autonomy Involvement at work Ambition
Here you can find a recommendation rate for this vacancy, as well as information on how to promote your application. Log in / Register to view this personalised information.
ReKrute offers you this new personality test to help you get to know yourself better and make the most of your applications. Take it now, it only takes 5 minutes maximum.
