Head of Data Protection & Cybersecurity Risk

As the organiser of some of the biggest and most iconic sport events in the world, we lead the way in the sport and event industry.
Join the team and support us on our mission.

THE POSITION

These are your key tasks:

• Lead the development and execution of FIFAs Data Protection & Cybersecurity Risk strategy in alignment with business objectives.
• Responsible for ensuring global compliance with data protection laws and regulations. 
• Develop and implement data protection policies, procedures, and guidelines to safeguard sensitive information.
• Conduct regular risk assessments and audits to identify potential vulnerabilities and areas of non-compliance. 
• Legal counselling to internal stakeholders on new projects, systems, or processes to assess and mitigate privacy risks, overseeing the completion of Data Protection Impact Assessments.
• Serve as the primary point of contact for data protection authorities, customers, and employees regarding privacy-related inquiries, complaints, and breaches. 
• Establish and maintain effective security governance structures, policies, and procedures to ensure compliance with relevant standards and regulations. 
• Identify, assess, and prioritize information security risks, and develop risk mitigation plans to protect the organization's assets and reputation.
• Develop and oversee incident response plans and procedures to promptly detect, respond to, and recover from security incidents and breaches.
• Promote a culture of security awareness and compliance among employees as well as FIFAs Member Associations through training programs, communication campaigns, and education initiatives regarding data protection best practices and compliance with legal requirements.
• Evaluate, manage relationships and manage contracts with third-party vendors and service providers to ensure that they adhere to appropriate security standards and practices and comply with applicable data protection laws.

YOUR PROFILE

We work hard at FIFA.
We are dedicated, ambitious and innovative.
And we respect our values. Always.
For all roles, we seek talented people with an entrepreneurial spirit and a global mindset.
The specific competencies we require for this position are:

• 10+ years of experience in a similar role.
• In-depth knowledge and experience in Audits, Training & Awareness and Project Management.
•  Master degree or similar higher education in Compliance, Law, Technology or related field. 
• Professional certifications in the area of Data Protection & Cybersecurity (CIPM, CISSP, CISM, CISA) would be an advantage.
• Strong working knowledge of current IT risks, relevant data protection and cybersecurity related standards (e.g. NIST, COSO, COBIT, ISO27001) and tools.
• Client oriented, efficient and effective. 
• Ability to define strategic goals, give clear directions and to lead and empower team members.
• Thorough analytical and problem-solving capabilities. 
• Excellent planning, documentation and organizational skills. 
• Ability to adapt speech to audience coming from a broad spectrum of disciplines and with various levels of technical knowledge.
• Outstanding communication skills.
• Proficient in Word / PowerPoint / Excel.
  Proficiency in Data Protection & Cybersecurity tools is an advantage.
• Fluent in English.
• Proficiency in any other FIFA language (F / ES / GER) is an asset
•  Willingness to travel to specific events.
• Readiness for stand-by duties during specific events.