Legal Officer

ORGANISATION INCERT is a center of expertise providing services and solutions based on knowledge and experience acquired in cryptography, Public Key Infrastructure (PKI), eTravel document, biometry and artificial intelligence. Established since 2012, INCERT is a Public Agency owned by the State of Luxembourg and the Luxembourg Chamber of Commerce. INCERT also represents and defends Luxembourg’s national interests at European and international organizations. Further information about INCERT can be found at www.incert.lu. Within the scope of its business activities, INCERT is now recruiting a Legal Officer & DPO as a permanent position. YOUR RESPONSIBILITIES Within the scope of its current activities and its incoming ones, INCERT recruited a Legal Officer & DPO for a permanent position. As part of the Executive Coordination Team, the Legal Officer & DPO plays a key role in ensuring the organisation’s legal and regulatory compliance, with a particular focus on data protection and privacy. The role is responsible for ensuring compliance with the GDPR and other applicable regulations, while supporting the organisation in identifying and managing legal and data protection risks. Working closely with management and internal teams, the DPO / Legal Officer provides legal and compliance advice, supports the implementation of data protection requirements, and contributes to the review and drafting of contracts, policies and projects involving personal data. The position requires strong legal and analytical skills, attention to detail, and the ability to work effectively with a wide range of stakeholders. At INCERT, the legal value of what we produce is entirely based on compliance. Data law and protection are not a support function: they are at the heart of the process. You wear two hats: Data Protection Officer, an independent guarantor of GDPR compliance, and Legal Officer, legal advisor to business lines and projects. Data Protection Officer :
• Carry out the missions of DPO provided for in Articles 37 to 39 of the GDPR, be the point of contact for the CNPD and the persons concerned
• Maintain the processing register, in conjunction with the business lines
• Conduct and supervise impact assessments, according to the principle of Privacy by Design and by Default.
• Manage the management of data breaches: qualification, documentation, notification to the CNPD and timely information of the persons concerned.
• Advise on international data transfers (standard contractual clauses, transfer analysis).
• Carry out GDPR compliance audits and controls, raise awareness and train employees Legal and Contractual Advice :
• Provide legal support to business departments: contract law, digital law, company law, intellectual property.
• Contribute to the legal aspect of responses to calls for tenders, including public contracts.
• Manage pre-litigation and coordinate external law firms.
• Ensure regulatory monitoring and feed internal policies
• Contract Drafting and Review: drafting, reviewing and negotiating contracts, with particular attention to legal clauses, risk management and compliance with contractual obligations.
• Employment Law: providing support and advice on employment law matters, including employment contracts, HR procedures, employee relations and monitoring regulatory developments.
• Due Diligence: conducting legal and regulatory due diligence, identifying potential risks, assessing compliance, and reviewing relevant documents and contractual commitments. Trust, Compliance and Governance Services :
• Identify legal and compliance risks, propose action plans and monitor their implementation.
• Collaborate with IT, Security, Quality, HR, Finance, Product teams and external auditors.

YOUR PROFILE
Technical skills and

education:
• Master of Laws (Digital Law, European Law, Data Protection) or equivalent
• Minimum 5 years of experience combining data protection and legal advice, in a concrete practice of the DPO function
• Operational mastery of the GDPR and Luxembourg data protection law
• Real-world experience in contract drafting and negotiation
• Ability to simplify legal reasoning for technical teams and to arbitrate between risk and business objective.
• Rigour, integrity and absolute discretion
• Fluent in French and English, both written and spoken Soft

skills:
• Structured, methodical, calm.
• Organisational skills and effective information management.
• Good listener, discerning, ability to understand complex subjects.
• Team spirit, humility and reliability.
• Discretion and sense of responsibility. Please note that a criminal record will be requested as part of the final stage of our hiring process. We look forward to receiving your application and a letter explaining your interest in the position at the following email address: hrlux@incert.lu