Group Data Privacy Coordinator (GDPC) & Regulatory Affairs Coordinator (RAC)

In this role you will drive GDPR implementation across European Cosma sites, ensuring compliant data handling and privacy practices. You will collaborate with GDPC and RAC teams to translate regulatory requirements into practical processes and trainings. You will support internal audits, data inventories, and governance activities, shaping privacy programs across a global automotive engineering organization. This is a chance to influence data protection, information security, and regulatory readiness at scale.

• Implement GDPR across European Cosma locations with local privacy leads
• Support management with privacy operations, inventories, notices, and consents
• Develop and adapt processes to legal requirements
• Evaluate applications and processing activities for compliance
• Identify gaps in internal processes against laws and Magna policies
• Deliver Data Privacy trainings to management and staff
• Assist in internal privacy audits and action plans
• Collaborate with GDPCs to improve efficiency and productivity
• Monitor regulatory changes and ensure ongoing compliance
• Support regulatory document submissions and cross-group communication
• Participate in internal audits related to regulatory compliance
• Support privacy training initiatives to keep staff updated

• University Degree in law or equivalent working experience
• Expertise in data protection laws, especially GDPR and information security standards
• Ideally certified Data Protection Officer or willingness to obtain credentials
• Operational experience in information technology preferred
• Pragmatic, self-starter with strong analytical skills
• Ability to build relationships and influence across diverse teams
• Strong English and German communication skills
• Strong project management skills
• Willingness to travel within Europe

• Pragmatic and self-motivated
• Strong analytical thinking
• Relationship-building across diverse teams
• GDPR knowledge
• Data protection practices and information security standards
• Data inventories and data processing agreements