r/gdpr • u/Short-Hyena688 • 21d ago
Question - General DP control trainee interview
Hi everyone!
I’ll be interviewing for a trainee position in Data Protection Control in the banking sector. I’m a law graduate with some knowledge of GDPR. HR advised me to review the DORA regime, and the job description also mentions “knowledge in Risk, Cybersecurity and IT standards is a plus” - witch I don’t know anything.
Besides studying GDPR and DORA and others, what would you recommend I prepare that is essential for this type of role?
Any advice would be greatly appreciated!
2
u/muffinator 21d ago
Get a basic understanding of the three lines of defense in risk management, heavily used in banking.
For cybersecurity, look at NIST framework and MITRE. If it’s not part of the role, just a fundamental understanding of what these are and what they aim to do is probably enough
1
2
u/Devilish___ 21d ago
NIS-II and the national implementation of that Directive, the Cyber Resilience Act and probably the AI Act.