What is the role about? 

We are seeking a strong Data Protection Officer who will play a critical role in driving change, and continuing to build, develop and deliver Bitvavo’s data protection program to ensure compliance with data protection and privacy laws, including GDPR. 

Reporting to the Head of Legal, you will have the scope to work closely with multiple business units/products to ensure Bitvavo remains compliant in all areas of Data Protection.

The position requires a broad understanding of all relevant legal issues on data protection including identifying the need for support from other experienced professionals. You will assist with and provide independent oversight of Bitvavo’s compliance with data protection legislation, with the opportunity to shape our data strategy.

How will you make an impact?

• Advise and guide Bitvavo on the policies and standards necessary to deliver on the company’s data protection obligations.
• Consult and engage with relevant data protection authorities, including ensuring regular briefings and maintaining accurate and up-to-date records demonstrating Bitvavo’s GDPR compliance.
• Provide and organise training and awareness-raising activities internally on data protection and privacy regulatory requirements and policies.
• Establish a culture across the company that embeds a respect for data protection and privacy, acting as the champion and role-model for data protection compliance.
• Assist in addressing mandatory notification and other legal issues in the event of a data loss or breach.
• Communicate complex technical concepts, and their associated privacy implications, with audiences at various levels of technical understanding.
• Demonstrate willingness to challenge the status quo and provide creative thinking and strategies for difficult challenges.
• Devise privacy-preserving methods of leveraging large structured, unstructured, transactional and real-time data sets, and analysing usage patterns.
• Make actionable recommendations using knowledge of data protection law, statistics, business understanding and common sense.

 How will you be successful?

• 4 to 12 years experience in data protection practices and with national and EU data protection laws and practices, with an in-depth understanding of GDPR.
• Proven record of engaging with data protection authorities on matters concerning data protection compliance.
• Relevant working experience dealing with data protection and privacy issues for a regulated entity, ideally Tech or e-commerce, organisations.
• Strong knowledge of and interest in emerging technologies and their potential social and economic impacts, including customer-facing e-commerce.
• Proven experience in identifying and analyzing complex legal/regulatory/business issues and providing appropriate legal advice regarding applicable legal and professional standards, often on a time-sensitive basis.
• Proven ability to manage multiple cases/matters/projects and teams of internal and external resources.
• Knowledge of IT security and experience in working with IT Security teams.
• Proven experience of proactive management of global compliance frameworks, and of providing training on compliance frameworks.
• Knowledge of data analysis methodologies and experience within a data-driven business.