Privacy Counsel

Creating Peace of Mind by Pioneering Safety and Security

At Allegion, we help keep the people you know and love safe and secure where they live, work and visit. With more than 30 brands, 11,000+ employees globally and products sold in 130 countries, we specialize in security around the doorway and beyond.

Privacy Counsel

The Allegion Privacy Office is a fast-growing team responsible for the global privacy program. You will be a key member of the team as we automate privacy processes with digital tools. You will also have exposure to our senior leaders including our executive leadership team. The Privacy Team is not only focused on privacy issues related to Allegion internal processes and employee data, but also Allegion’s commercial and consumer security products and solutions.

You will advise internal clients on the General Data Protection Regulation (GDPR), and other privacy and data protections laws and regulations applicable in the European Union. There will be opportunities to travel to Allegion’s various subsidiaries across Europe. The Privacy Counsel role will report to the Deputy General Counsel, IP and Cybersecurity, and Chief Privacy Officer of Allegion and work closely with the Allegion International Legal team

Duties and responsibilities:
In this role, you will work closely with the Legal, Compliance, and Cybersecurity functions to develop and monitor policies and standards applicable to the business and in compliance with the GDPR. This includes:
- Implementing measures and a privacy governance framework to manage data use in compliance with the GDPR, including developing templates for data collection, assisting with data mapping, and vendor management reviews.- Working with key internal stakeholders and Business units leadership in the review of projects and related data to ensure compliance with local data privacy laws and advise on privacy impact assessments.- Serving as a point of contact and liaison for the Supervisory Authority and other EEA Data Protection Authorities on all data protection related matters under the GDPR.- Reviewing vendor contracts (including Model Clauses) and consents needed to implement projects in partnership with Allegion’s procurement and cybersecurity functions.- Support the maintenance of the organization’s internal records of processing activities.- Advise on Data Protection Impact Assessments and monitor their performance.- Partners with Business units leadership in the relevant countries, to ensure the relevant legal entities maintain an adequate Privacy Compliance program.- Partners with relevant functional leaders who are accountable for privacy compliance (e.g., incident response team/process and audit readiness process for relevant operating companies) Managing and conducting ongoing reviews of Allegion’s privacy governance framework.- Monitoring changes to local privacy laws and making recommendations to the Chief Privacy Officer Committee when appropriate.- Setting standards and reviewing policies and procedures globally that meet the requirements under the GDPR and any localization requirements in countries of operation.- Developing and delivering privacy training to various business functions.- Developing strategies and initiatives to ensure engagement with key internal and external stakeholders.- Understanding of risks related to business processes that involve personal information and provision of guidance to mitigate these risks- Coordinating and conducting data privacy audits using Allegion’s control framework.-
- Collaborating with the Cybersecurity team to maintain records of all data assets and exports and maintaining a data security incident management plan to ensure timely remediation of incidents including impact assessments, security breach response, complaints, claims, or notifications.

Qualifications:
- Master’s degree in law- At least 4-7 years of legal experience including at a law firm or prior in-house experience- CIPP/E qualification (CIPM, CIPT, CDP is an advantage)- Strong business acumen, and experience with complex international contract negotiations- Experience in EU data privacy laws.- At least four years of experience within a compliance, legal, audit, and/or risk function, with recent experience in privacy compliance.- You are fluent in English and German. Any other language is an asset (French, Italian and/or Dutch being an advantage).- Admission to a European Bar Association as a lawyer is an advantage.- Good self-awareness, constructive attitude, eager to seek and receive feedback.- Drive for results and sense of ownership, but open to direction.- Experience in developing and delivering policy and compliance training.- Experience working in a large, global
- _ideally with US-interaction_) organization.- Ability to work unsupervised and exercise leadership.- Excellent writing and presentation skills.- Strong change and project management skills, including the ability to manage time well, prioritize effec