Applied Data Protection Expert

The introduction of new IT systems is regularly associated with the processing of personal data and is therefore subject to strict data protection requirements. Therefore, the Expert for Applied Data Protection plays a central advisory and operational role to minimize legal risks, ensure compliance, and provide auditable documentation for regulatory data protection.

.msg Romania is a tech company with strong knowledge in software development, business consulting, and various project and product development methodologies, with a large portfolio of clients from different domains such as Automotive, Insurance, Banking, etc. We are part of the msg group, an international consortium of companies with over 10,000 experts in 28 countries represented in the world's most important markets.

  • Experience in supporting IT system implementation projects from a data protection perspective
  • Solid knowledge of GDPR legal base
  • Hands-on experience with Data Protection Impact Assessments (DPIAs), as well as risk assessments and threshold analyses
  • Clear and effective communicator
  • Flexible and adaptable team player
  • Efficient problem-solver
  • Analytical and structured
  • Proficient in German and English language, both written and spoken

  • Identify whether and to what extent personal data is processed
  • Evaluate the categories of data subjects (e.g., employees, customers, business partners)
  • Place the IT system within existing processes, data flows, and responsibilities
  • Distinguish between controllership and data processing on behalf
  • Contribute to the creation of processing records (Art. 30 GDPR) in the designated format and tool (GRC)
  • Review and supplementing retention and deletion concepts
  • Advise on data protection‑compliant role and authorization concepts (information security)
  • Advise and supporting the documentation of technical and organizational measures (information security)
  • Assess the applicability of Art. 6(1) GDPR (e.g., contract performance, legal obligation, legitimate interest)
  • Create and documenting legitimate interest assessments under Art. 6(1)(f) GDPR
  • Evaluate alternative legal bases (e.g., consent) and associated risks

  • Performance Bonus
  • 30 RON/day meal tickets
  • Up to 30 days of annual leave
  • Private health insurance (Regina Maria)
  • Flexible schedule
  • Access to technical events
  • 7Card or other sports choices
  • Bookster subscription
  • Internal support programs for parents

Your point of contact

Iulia Ambru

Recruitment Specialist

“Value - inspired by people”. It has always been our strong conviction that people create progress and move the company forward. By joining us, you will become part of a team constantly supported in its growth journey and a company that truly understands the need for creativity, knowledge, diversity and freedom of expression.