Data Security and GDPR Compliance Manager (M/F)

About the company

Your missions The InVivo group, one of the leading European agricultural groups (€11.4 billion turnover, 13,000 employees), places the protection of personal data at the heart of its governance, compliance, and risk management challenges.

Your tasks

Reporting to the Group Legal Department, you will define and manage the governance and risk management framework related to personal data protection, in France and internationally. Working closely with the business departments (Retail, Agri-food, Agriculture, Malt.), you will strengthen control mechanisms, secure practices, and support the Group's transformations.

Data Privacy Governance

• Define and deploy the Group's personal data protection strategy.
• Structure and evolve Data Privacy governance, policies, and procedures.
• Define roles, responsibilities, and management methods for the framework.
• Lead an international network of focal points to ensure a harmonized approach.
• Advise teams on regulatory obligations, particularly GDPR.

Risk Management and Control

• Develop and maintain the risk mapping related to personal data processing.
• Manage internal control and audit programs for the compliance framework.
• Ensure the compliance of processing activities (register, policies, and procedures).
• Monitor remediation plans and risk management indicators.
• Support executive bodies in Data Privacy risk assessments.
• Prepare reporting for General Management, business units, and governance bodies.

Compliance and Project Support

• Ensure compliance with regulatory requirements, particularly GDPR.
• Supervise the implementation and maintenance of compliance frameworks.
• Support Data Protection Impact Assessments (DPIA/AIPD).
• Manage data subject rights requests, data breaches, and regulatory notifications.
• Draft and negotiate contractual clauses relating to personal data protection.

Risk Management Culture

• Raise awareness and train teams on personal data protection issues.
• Support entities in adopting policies, procedures, and control mechanisms.

Requirements

Education and Experience

• You have significant experience of at least 5 years in governance, compliance, internal control, or risk management functions, ideally acquired in an international and multi-sector environment. Demonstrated experience in conducting audits, evaluating internal control mechanisms, or creating risk mappings.
• With a Master's degree (Bac+5) in audit, internal control, compliance, risk management, data governance, cybersecurity, or equivalent, you possess a solid understanding of regulatory environments and control mechanisms.

You have notably developed

• A strong mastery of personal data protection issues and the associated regulatory framework, particularly GDPR.
• A demonstrated ability to transform regulatory requirements into operational frameworks, action plans, and management indicators.

Specific experience in Data Privacy governance as well as a recognized certification in the field of personal data protection (AFNOR, IAPP, or equivalent) are assets.

Skills and Personal Qualities

• You combine strategic vision with operational sense, with a strong ability to analyze, evaluate, and prioritize risks.
• You are recognized for your rigor, autonomy, initiative, and ability to structure complex frameworks.
• You possess excellent interpersonal and writing skills and know how to convince and unite diverse stakeholders.
• You demonstrate pragmatism, discernment, and a real sense of priorities.
• You enjoy cross-functional work and know how to operate in international, multicultural, and decentralized organizations.
• You are fluent in English, both written and spoken.

What we offer

Position based at our headquarters in Paris

• Partial teleworking possible (2 to 3 days/week) after the probation period
• 85% reimbursement of NAVIGO transport pass or sustainable mobility allowance
• Meal vouchers for teleworked days