Compliance Officer

Corporate Offices At Kempinski, we don't just offer stays; we curate moments. As a hospitality organization, anchored in a legacy of elegance and a pioneering spirit, we have grown into a collection of iconic hotels and resorts around the world, each a landmark in its own right. From grand palaces steeped in history to contemporary masterpieces of design, Kempinski is where impeccable service meets authentic local experiences. We empower our people to be artisans of hospitality, fostering an environment where passion is nurtured, individuality is celebrated, and every detail is thoughtfully considered. Joining Kempinski means becoming part of a family that is dedicated to creating memories that last a lifetime for our guests, and a fulfilling and enriching career for our team. If you are driven by excellence, inspired by the art of hospitality, and seek to contribute to a legacy of luxury, we invite you to explore the exceptional opportunities that await you at Kempinski Hotels. Come, be a part of our story. Key Responsibilities As the Compliance Officer, you will serve as the primary steward of guest and employee privacy across our global portfolio of luxury hotels. You will be responsible for safeguarding the brand’s reputation by ensuring that our operational excellence is matched by unwavering ethical and legal integrity. Policy Development & Governance - Draft and Maintain: Create, update, and implement robust data protection policies, standards, and procedures tailored to the hospitality industry. - Global Alignment: Ensure local hotel practices align with the Corporate Privacy Framework while respecting regional legal nuances. - Records of Processing: Maintain comprehensive Records of Processing Activities (ROPA) for all corporate and property-level functions. Compliance Monitoring & Auditing - Compliance Oversight: Monitor compliance with the GDPR and other relevant privacy laws through regular gap analyses and internal audits. - DPIAs: Lead and document Data Protection Impact Assessments (DPIAs) for new technologies, guest loyalty programs, and marketing initiatives. - Third-Party Risk: Evaluate the data protection posture of vendors and partners, ensuring Data Processing Agreements (DPAs) are in place. Advisory & Training - Expert Guidance: Serve as the primary point of contact for the business on privacy matters, providing pragmatic advice on "Privacy by Design." - Awareness Programs: Design and deliver engaging data protection training modules for corporate staff and hotel management teams worldwide. - Subject Access Requests: Oversee the timely and legal handling of Data Subject Access Requests (DSARs) and "Right to be Forgotten" queries. Incident Management - Response Leadership: Lead the response team in the event of data breaches, ensuring timely notification to supervisory authorities and affected individuals. - Remediation: Conduct post-mortem analyses of incidents to strengthen technical and organizational measures. Skills, Knowledge and Expertise - Education: Bachelor’s or Master’s degree in Law, IT, or Business Administration.CIPP/E, CIPM, or CIPT (IAPP) certifications are highly preferred. - Experience: 5+ years in a compliance role, preferably within the luxury hospitality or travel sector. - Languages: Fluent English mandatory; proficiency in a second language is a plus. - Technical Proficiency: Strong background in Corporate/M&A, Real Estate, or Hospitality Law. Benefits Kempinski emphasizes talent development and offers career progression within its global network, with properties in over 30 countries. There are opportunities to work in diverse cultural environments whilst continuing your professional growth. We are proud to foster a culture where employees feel valued, heard, and are empowered to deliver exceptional guest experiences. You will receive a competitive salary & benefits including private medical insurance, generous annual vacation allowance, annual bonus & discount on stays at our properties across the globe. Be part of a legacy, build your future. Discover the possibilities at Kempinski. Equal Opportunities As an equal opportunity employer, Kempinski embraces diversity and is committed to creating a workplace where everyone feels valued and has the opportunity to succeed. Kempinski is committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability or veteran status.

Bachelor’s or Master’s degree in Law, IT, or Business Administration. CIPP/E, CIPM, or CIPT (IAPP) certifications are highly preferred. 5+ years in a compliance role, preferably within the luxury hospitality or travel sector. Fluent English; second language a plus.

Draft, update, and implement data protection policies, standards, and procedures aligned with corporate privacy framework. Maintain Records of Processing Activities (ROPA). Monitor GDPR compliance and conduct internal audits and gap analyses. Lead Data Protection Impact Assessments (DPIAs). Assess third-party data protection posture and ensure DPAs. Act as primary privacy advisor to the business; deliver privacy training for corporate staff and hotel management. Manage Data Subject Access Requests (DSARs) and Right to be Forgotten requests. Lead incident response for data breaches and perform post-mortem analyses to strengthen safeguards.