Enterprise Risk Manager/ Data Privacy Officer

<h3>Bedrijfsomschrijving</h3><p>Lely, founded in 1948, is committed to creating a sustainable, profitable, and enjoyable future in agriculture. Driven by the challenges farmers face and the needs of cows, we develop high-quality robots and data systems that enhance animal welfare, flexibility, and productivity on dairy farms. Our mission is to support sustainable food production.</p><p>For over 30 years, we have been a global leader in the sales and service of automated systems for successive generations of dairy farmers. Every day, we inspire our colleagues to provide customers with innovative solutions and to be a reliable partner for long-term advice and support. With our state-of-the-art Lely Campus in Maassluis and a global network of dedicated Lely Centers offering tailored sales and service, Lely operates in more than fifty countries.</p><h3>Vacatureomschrijving</h3><p>Lely is an innovative family-owned company that works every day on smart and sustainable solutions to make the lives of dairy farmers around the world easier, more profitable, and more enjoyable. Within this mission, the Risk &amp; Security department plays a key role: we ensure that opportunities are maximized, risks are well understood, and data remains safe and confidential.</p><p>As a Risk Manager / DPO at Lely, you’ll be part of an energetic team of three colleagues working to strengthen our risk management and data privacy capabilities. You help identify risks, raise awareness, and further professionalize our policies. No two days are the same: one day you’ll be tackling strategic issues related to new laws and regulations, and the next you’ll be assessing processes or providing advice on cybersecurity and privacy.</p><p>You’ll work closely with departments such as IT, Legal &amp; Compliance, HR, and the business to identify risks, develop and implement policies, and ensure effective execution. You’ll be a trusted advisor and sparring partner for management and colleagues, translating complex legislation into practical guidance and helping the organization grow in maturity.</p><p>In addition, you’ll play an active role in the implementation of NIS2 within Lely. You’ll coordinate actions, support teams in developing ITDR and BCM plans, and directly contribute to the resilience and continuity of our organization.</p><p><strong>Your key responsibilities:</strong></p><ul><li>Conduct risk analyses in the areas of information security and privacy, and advise management on appropriate control measures.</li><li>Advise and support on privacy-related matters, DPIAs, data processing agreements, and data breaches.</li><li>Translate GDPR requirements into clear policies and guidelines on handling sensitive data, including implementation and maintenance.</li><li>Increase awareness of IT, information, and security risks across the organization.</li><li>Coordinate, support, and/or conduct internal and external IT audits.</li></ul><h3>Functie-eisen</h3><p>You are an independent professional with a strong affinity for data privacy and risk management. You’re not afraid to challenge the status quo, can easily switch between operational and strategic levels, and know how to translate policies into practical implementation.</p><p><strong>In addition, you bring:</strong></p><ul><li>A bachelor’s or master’s degree (HBO/WO) in a relevant field such as Privacy, Risk Management, Information Security, or (IT) Auditing.</li><li>At least 5 years of experience in (information) risk management or a comparable role.</li><li>Knowledge of relevant standards and regulations such as GDPR, NIS2, ISO 27001, and CRA.</li><li>Experience with information security frameworks such as ISO 27001, NIST, or CIS Controls.</li><li>Strong advisory skills and the ability to move fluidly between detail and the bigger picture.</li><li>A proactive and collaborative attitude focused on achieving improvements.</li><li>Preferred: certifications such as RE, RO, CISSP, CIPP, or equivalent.</li><li>Excellent command of the English language.</li></ul><p><em>A pre-employment screening applies to this position, consisting of a Certificate of Conduct (VOG) and a background/integrity check. Because this role involves access to sensitive (financial) information and customer data, we attach great importance to a thorough assessment. The screening must be successfully completed before you can start working with us. We cover the cost of the VOG application and, of course, handle your personal data with care, in line with our privacy statement.</em></p><h3>Aanvullende informatie</h3><p>Working at Lely means contributing to sustainable progress within one of the most innovative organizations in the Netherlands. You’ll help future-proof the agricultural sector – and we’ll make sure you have all the space, resources, and support you need to do so.<br/> Because the Risk team is small, you’ll have plenty of room to make your own impact and further develop both yourself and the role.</p><p><strong>In add