Overview
Data Protection Officer Jobs in Sofia, Sofia City, Bulgaria at COMAC MEDICAL
Title: Data Protection Officer
Company: COMAC MEDICAL
Location: Sofia, Sofia City, Bulgaria
At Comac Medical, we are committed to improving patients’ lives by delivering high-quality clinical research services across Europe and beyond. As a trusted Contract Research Organization, we uphold the highest standards of ethics, compliance, and data privacy.
We are seeking for experienced Data Protection Officer to join our Legal Department. The role requires in-depth knowledge and a proven track record within the industry, a strong compliance focus, excellent communication and presentation skills, and the ability to influence and support positive change within an organization.
About the Role
As the Data Protection Officer, you will serve as the independent guardian of data privacy within Comac Medical. You will ensure that the personal data of employees, sponsors of clinical trials, service providers, clinical research organizations, MedTech and Biotech companies. and clinical trial participants is processed in compliance with the General Data Protection Regulation (GDPR) and applicable national data protection legislation.
Working closely with the Head of Legal Department and cross-functional teams, you will help strengthen the company’s privacy framework, support regulatory compliance, and promote a culture of data protection across the organization.
Key Responsibilities:
Compliance Monitoring & Auditing
- Fulfil the tasks of the designated role of DPO as defined by Article 39 of the GDPR.
- Monitor compliance with the GDPR and applicable national data protection legislation.
- Oversee the implementation and maintenance of internal data protection policies and procedures.
- Promote privacy awareness through staff training and education.
- Conduct regular audits of data processing activities and recommend corrective actions where necessary.
Advisory & Strategic Support
- Advise management and employees on GDPR requirements and data protection best practices.
- Lead and support Data Protection Impact Assessments (DPIAs), including evaluating when they are required and monitoring their implementation.
- Provide guidance on data retention and secure destruction practices to ensure compliance with legal and business requirements.
Data Subject Rights & Regulatory Liaison
- Act as the primary point of contact for data subjects and facilitate the exercise of their GDPR rights, including access, rectification, erasure, restriction, and portability.
- Serve as the official contact with the relevant Supervisory Authority regarding data protection matters.
- Support the management of personal data breaches, including risk assessment, documentation, regulatory notifications, and communication with affected individuals where required.
Records & Documentation
- Maintain the organization’s Records of Processing Activities (ROPA) as a data controller in accordance with Article 30(1) GDPR.
- Maintain and monitor processing records where Comac Medical acts as a data processor under Article 30(2) GDPR.
- Support the preparation and maintenance of privacy notices and transparency documentation in accordance with Articles 12–14 GDPR.
What We’re Looking For
Qualifications & Experience
- University degree in Law or a related field.
- Specialized certification in data protection (e.g., CIPP/E, CIPM) is required.
- 3–5 years of professional experience in data protection or privacy compliance.
- Experience within clinical research, life sciences, or the healthcare industry will be considered an advantage.
Knowledge & Skills
- Solid knowledge of the GDPR, country-specific data protection laws across Europe, and privacy requirements within clinical research and healthcare.
- Ability to perform the DPO function independently and without conflict of interest.
- Excellent organizational, analytical, and problem-solving skills.
- Strong written and verbal communication skills.
- Excellent interpersonal skills with the ability to build relationships across all levels of the organization.
- Adaptability whilst staying calm in high pressure scenarios.
- Proficiency in Microsoft Office (Word, Excel, and PowerPoint).
- Fluent English, both written and spoken.
Why Join Comac Medical?
At Comac Medical, you will become part of an international organization dedicated to advancing medical innovation through high-quality clinical research. We offer the opportunity to work alongside experienced professionals in a collaborative environment where integrity, continuous learning, and professional development are highly valued.
If you are passionate about data privacy and want to contribute to protecting sensitive health information while supporting cutting-edge clinical research, we would be delighted to hear from you.
Comac Medical is an Equal Opportunity Employer and welcomes applications from all qualified candidates.
All applications will be treated with the strictest confidentiality and processed in accordance with applicable data protection legislation.
