Provide legal guidance on data protection management system., Drive data protection certification process pursuant to Article 42 GDPR., Manage and respond to data subject requests., Provide legal support for the management and monitoring of the ISMS (ISO 27001)., Advise on the implementation of information security norms and standards., Organize, execute, and follow up on internal and external audits., Monitor legal and regulatory developments in data privacy and information security., Develop and implement data privacy and information security training programs., Draft, review, and negotiate commercial contracts., Provide legal advice on contract law, corporate governance, and other legal matters., Contribute legal expertise to internal projects related to data protection and information security., Collaborate with cross-functional teams to ensure privacy and security by design principles., Participate in relevant industry groups and forums.