Data Protection Consultant
OPORA Foundation · Amsterdam Centrum, Netherlands
Dutch is a plusPosted today
Apply for this job
You apply off-site, with the employer or the job board. I never handle applications.
OPORA is a Dutch non-profit foundation based in Amsterdam that applies social innovation to improve the systems people rely on to live better lives. Since 2022, we have supported displaced Ukrainians and other vulnerable groups across four core areas: access to health, access to justice, democratic engagement, and social inclusion.
Essential requirements
- Demonstrable experience advising on and implementing EU GDPR compliance frameworks, preferably in NGOs, civil society, humanitarian, health-adjacent, research, youth, or social-support settings.
- Strong knowledge of GDPR principles, lawful bases, special-category data, consent, transparency, data subject rights, DPIAs, processor/controller relationships, retention, security, and breach response.
- Experience working with sensitive and special-category data, particularly involving minors, displaced persons, vulnerable groups, psychosocial/wellbeing-related information, helpline/casework data, or research/evaluation data.
- Experience developing practical policies, templates, procedures, staff guidance, and training materials that non-lawyers can use in day-to-day operations.
- Ability to audit digital tools and vendors, including CRMs, Google Workspace, online forms, survey tools, file storage systems, and AI tools.
- Ability to work independently and translate legal advice into operational workflows across multiple teams.
- Excellent written and spoken English. Dutch knowledge would be a strong advantage, especially for work involving Dutch legal requirements, vendors, contracts, or supervisory-authority guidance.
Desirable requirements
- CIPP/E, CIPM, GDPR Practitioner, or equivalent privacy/data protection certification.
- Experience acting as, supporting, or advising a Data Protection Officer.
- Experience with data protection in EU-funded projects, research consortia, monitoring and evaluation, or donor reporting.
- Familiarity with Dutch GDPR implementation practice, the UAVG, and data protection issues in health-adjacent, youth, safeguarding, or psychosocial-support contexts.
- Experience conducting DPIAs and developing records of processing activities.
We provide
- Part-time position
- Pension scheme
- Budget for professional development
- 8% holiday allowance
- Reimbursed travel between home and office
- Hybrid working model
- Convenient office location in the center of Amsterdam
- International team
- A dynamic environment within a fast-growing organization
If you recognise yourself in this role, we'd love to hear from you. Apply, and we will review your application and get back to you!
Werklocatie: Hybride werken in 1012 Amsterdam Centrum