Privacy, Data & Innovation Lead

Introduction

The Data & Innovation unit empowers Security Services with proactive insights and safe automation. In this role, you bridge compliance and innovation, leading operational privacy coordination, embedding privacy-by-design, and driving responsible data use across the department.

What are you going to do?

Lead operational privacy coordination

• Serve as the department’s privacy point of contact and primary liaison to the central Privacy Office/DPO;
• Lead LIAs, DPIAs, and privacy-by-design reviews for tools and analytics pipelines;
• Set practical rules for data minimization, retention, and access controls.

Enable secure, data-driven security operations

• Guide teams on responsible, compliant data use across physical, cyber, flight, and integrity domains;
• Help security specialists navigate data limitations, ethics, and regulatory boundaries.

Drive process improvement, innovation & change

• Champion the adoption of privacy-compliant tools, workflows, and safe automation;
• Partner with Data & Technology (D&T) to deploy compliant, scalable data solutions.

Where do you land?

Security Services consists of five units: Intelligence, Regulations, Operations, Integrity, and Data & Innovation. This position is part of the Data & Innovation unit.
The Security Services department provides services 24/7 to safeguard the continuity of the KLM Group’s operations and business processes. It acts both proactively and reactively in response to security threats, risks and challenges, under the motto: Your security, our priority!

Your workplace will be Building 201 at Schiphol-East. You will generally work at this location for at least three days per week, taking your working hours and operational requirements into account. On the other days, you may work from home if the nature of your work allows it.

Your profile

You are a pragmatic privacy professional with an affinity for data and innovation. You are comfortable discussing technical architectures with data specialists and operational workflows with security analysts. Rather than simply citing regulations, you focus on how to make data work securely, effectively, and responsibly. You understand change management and know how to bring colleagues along.

You bring:

• A Bachelor’s or Master’s degree (e.g., Information Management, Law & Technology, Data Science, Business Analytics, or related);
• At least 2 years of professional experience in privacy coordination, data governance, or analytical roles in regulated environments;
• Practical experience conducting DPIAs and applying privacy-by-design to data systems and software;
• Solid knowledge of GDPR, access controls, data retention, and lifecycle management;
• Strong stakeholder and change-management skills. You are able to make complex compliance practical and accessible;
• Based in The Netherlands.

Advantageous:

• A privacy certification such as CIPP/E, CIPM, or equivalent;
• Experience in aviation, security, or another highly regulated environment.

Competencies

• Problem analysis and analytical judgment
• Pragmatic privacy application & risk awareness
• Change management & implementation skills
• Clear communication across technical, legal, and operational levels
• Discretion and handling of sensitive information
• Collaborative stakeholder management

Competencies