Privacy Manager & DPO — Fractional

About the Position

Privacy Manager & DPO - Fractional

Enpal, the leading green unicorn in Europe, is seeking a Privacy Manager & DPO - Fractional to join our Italy Office in Milan. We help families achieve energy independence with photovoltaic, wallbox, and heat pumps, managed by proprietary digital technologies.

Responsibilities

• Document data processing activities and organize the register, starting with high-risk areas: special data categories, employee data access, data retention, marketing, and consent management.
• Strengthen procedures for compliance: manage data breaches within 72 hours, conduct Data Protection Impact Assessments (DPIA) for new projects, and establish Data Processing Agreements with suppliers.
• Monitor compliance with regulations, policies, and procedures, identifying gaps and corrective actions.
• Ensure the data processing activities register maintained by the Data Controller is complete, accurate, and up-to-date.
• Provide opinions on impact assessments and oversee their execution, pursuant to Article 35(2).
• Manage relationships with the Data Protection Authority and data subjects, cooperating with the Authority.
• Handle data breaches in collaboration with IT, Legal, and other involved functions, respecting notification deadlines.
• Work with IT and Information Security on the evaluation of technical and organizational measures.
• Design and deliver privacy training and awareness to the organization.
• Monitor the evolution of data protection regulations, including NIS2, AI Act, and whistleblowing, and assess their impacts.
• Adapt Group privacy policies to the Italian regulatory framework, reporting discrepancies requiring local solutions, and contribute to international privacy projects.
• Coordinate external consultants and law firms when necessary.

Requirements

• At least 5 years of experience in Privacy, Data Protection, or Information Security, with concrete cases.
• In-depth knowledge of GDPR, Italian legislation (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018), and Garante provisions.
• Documented experience with DPIA, DPA, data breaches, registers, notices, and policies.
• Absence of conflicts of interest as per Article 38(6) GDPR, to be certified at the time of appointment.
• VAT number and professional liability insurance coverage.
• Fluent in Italian and English; English is the working language with the Group.

Nice to Have

• Experience in high-volume B2C contexts: direct marketing, lead generation, teleselling, consent management.
• Previous designation as a DPO, preferably in multinational groups.
• Experience in the energy, utility, or retail sector.
• DPO certification according to an accredited scheme or UNI 11697:2017 professional profile.
• Familiarity with the Organizational Model under Legislative Decree 231/2001 and whistleblowing legislation (Legislative Decree 24/2023).
• Experience working in an Italian branch reporting to a foreign headquarters.

We Offer

• A guaranteed volume of workdays during the setup phase, with a calendar agreed in advance, and reimbursement of documented expenses agreed in advance.
• A dedicated budget for training, tools, and specialized studies, pursuant to Article 38(2) GDPR.
• An internal privacy contact as a stable interface for gathering information and implementing agreed actions.
• Direct access to the top management and key functions: decisions are made where you work.
• Interaction with Enpal Group's international network of privacy experts.
• A rapidly growing context where the privacy function is being built from scratch.

The search is aimed at candidates of all genders, in compliance with Legislative Decree 198/2006. We evaluate applications based on skills and experience. Personal data transmitted are processed pursuant to Articles 13 and 14 of Regulation EU 2016/679 solely for selection purposes: the complete information notice is available on the application page.

About the Company

Enpal is the leading green unicorn in Europe, born in Berlin in 2017 and present in Italy since 2023, with over 90,000 customers and 905 million euros in revenue. We help families achieve energy independence with photovoltaic, wallbox, and heat pumps, managed by proprietary digital technologies.