Mid-Level Lawyer – Data Governance and Regulatory Compliance
Job opening for the Legal team. We look for people who, like us, are innovative, practical, objective, passionate about what they do, and strive for excellence. So, do you fit this profile?
Responsibilities and assignments
Job Mission Ensure compliance with the company's internal data governance norms in Brazil, ensuring that all operations are in compliance with the Lei Geral de Proteção de Dados (LGPD) and other regulatory requirements. Act as a consultant to strategic areas, such as RH, IT, and P&D, ensuring that data processing is conducted under the highest ethical and legal integrity standards.
Main Responsibilities • Monitoring Data Governance activities: review and audit internal flows and technological implementations in an industrial environment, ensuring alignment with the principles of proportionality and necessity regarding Brazilian legislation; • Mapping and updating the company's data flows: develop the legal architecture for data processing, ensuring synchronization with LGPD requirements; • Commercial Data Strategy: provide legal advisory on the legal basis for processing data of suppliers linked to the factory operation; • Third-Party Governance: manage data sharing protocols with commercial partners and distributors, ensuring a secure ecosystem for business-sensitive data; • Privacy by Design: technically guide teams to ensure that protection and privacy are integrated into the lifecycle of each data flow; • Impact Assessments (DPIA): conduct data protection impact reports for complex activities, especially those involving advanced technologies or international data transfers; • Regulatory Interface: act as one of the focal points for regulatory inquiries, managing transparency and the organization's defense without compromising confidential operational strategies; • Respect and update the company's policies focused on data protection and privacy; • Create an interface with the company's Data Protection Officer (DPO); • Create internal activity management reports for the company's legal department managers.
Requirements and qualifications
Requirements • Bachelor's degree in Law with active registration in the OAB; • Consolidated experience in data governance and regulatory compliance; • Proven experience in activities focused on data protection and privacy; • Proven experience in sectors such as automotive, industrial, or Technology will be a differentiator; • Knowledge of ISO 27001 quality standards for data processing; • Fluent English (mandatory for global reporting); • Strong strategic communication and risk management skills; • Availability for 100% in-person work in São Paulo or Camaçari.
Additional information Here at BYD we prioritize the well-being of our employees and are constantly seeking improvements for our benefits package. Your package will include: · Co-participation medical and dental insurance for you and your dependents; · Health and wellness programs to improve your quality of life; · Golden Farma Card for purchases in registered pharmacies with direct payroll discount, valid for both medicines and hygiene and beauty items; · WellHub (formerly Gympass) to take care of your physical and mental health; · Vale Alimentação to help you with your monthly shopping; · Vale Combustível or company chartered bus; · Porto Seguro collective life insurance, without payroll deduction; · Daycare assistance for dependents, according to eligibility rules.