jobs.bg

Data Protection Officer & Privacy Lead

АПГРЕЙТ ООД · Lead

7 ноември 2026 г.
Първо видяна
7 ноември 2026 г.
Последно видяна
Активна
Статус
днес
Видяна

Умения

data protectioncomplianceGDPRSOC 2

Сертификати

Предимство

Описание

Data Protection Officer & Privacy Lead

We are a young and ambitious company like no other!

We are one of the fastest growing global IT companies, supporting the highest tech organizations in the world from six locations: Sofia, Skopje, Bucharest, Tel Aviv, Chisinau and Warsaw.

WHY JOIN OUR DREAM TEAM?

Our people are our greatest asset. We strive to create a welcoming environment where everyone belongs, offering a great workplace, unique benefits, and opportunities for growth.

YOUR MISSION:

Serve as our designated DPO

  • Monitor compliance with GDPR (including the Data Security Regulations), CCPA/CPRA, and other applicable laws worldwide, and report findings to senior management and the Board.

  • Advise on and review DPIAs, especially for biometric processing, new markets, and new product features.

  • Act as the contact point for the supervisory authorities, and for data subjects exercising their rights.

Own the annual privacy work plan and deliver regular reporting to management and the Board.

  • Run privacy awareness and training across R&D, product, operations, and customer-facing teams.

Lead the privacy program day to day

  • Maintain core privacy documentation: privacy policies and notices, records of processing (RoPA), retention schedules, and internal procedures.

  • Manage cross-border transfer mechanisms: Israeli adequacy, SCCs, the EU-U.S. Data Privacy Framework, and transfer impact assessments.

  • Oversee vendor and sub-processor privacy due diligence.

Support customers and the business

  • Partner with Sales and Product on market-specific privacy requirements and privacy-by-design in new features.

  • Negotiate and review customer DPAs, privacy terms, and security and privacy questionnaires, reflecting our role as a processor for most customer data.

  • Support customers' own DPIAs and regulatory inquiries about our processing activities.

Advise on AI and data governance

  • Advise on the privacy side of AI governance under the EU AI Act and other AI emerging laws.

WHAT YOU WILL BRING TO THE COMPANY:

  • 4+ years of hands-on experience in privacy and data protection within a technology/SaaS company or a leading law firm.

  • Strong, practical command of GDPR, with real experience applying it in an EU-regulated business, plus working knowledge of U.S. privacy frameworks (CCPA/CPRA, state privacy laws).

  • CIPP/E Certification or equivalent.

  • Proven ability to negotiate DPAs and handle customer privacy diligence with large, regulated enterprises.

  • Good understanding of technology and information security.

  • Proficiency in AI tools and a creative, responsible approach to using them in your work.

  • Excellent written and spoken English.

NICE TO HAVE/ADVANTAGE:

  • Previous DPO designation or experience as a DPO's right hand.

  • Experience with supervisory authority engagement in the EU.

  • Privacy certifications: CIPP/US, CIPM, CIPT.

  • Familiarity with ISO/IEC 27001 / 27701 and SOC 2 environments.

OUR COMMITMENT TO YOU:

  • Attractive remuneration package.

  • Working style - Hybrid.

  • Flexible Working Hours: We care about results, not when you clock in, depending on the team working schedule.

  • Comprehensive Private Medical Insurance: Your health matters to us (UNIQA).

  • Annual leave starting with 20 days up to 25 days (depending on the relevant experience).

  • Multisport Card: Stay active with a subsidized membership, courtesy of AppGreat.

  • Netflix or Spotify Subscription: Your choice, fully covered by us for your entertainment and relaxation.

  • Monthly Food Vouchers.

  • eMAG birthday gift voucher: A little extra something to celebrate your special day.

  • Childbirth gift: A thoughtful gift to support and celebrate one of life’s most important moments.

  • Office Snacks & Treats: Fresh fruits, nuts, coffee, sweets, and protein bars always stocked.

  • Team Events & Offsites: Regular team buildings and company events to keep the good vibes going.

  • Learning & Development: Access to training programs to boost your skills and career.

  • Career Growth Opportunities: Grow with a fast-scaling, innovation-driven company.

  • Supportive Culture: Work with a young, motivated, and close-knit team.

  • Modern Office in Prime Location: Our office is right next to Paradise Mall in Sofia - easily accessible and surrounded by great spots.

We believe great work starts with great people. If this feels like the right place for you, we’d love to connect.

We appreciate every application we receive. Please note that only candidates selected for the next stage of the recruitment process will be contacted. If your profile matches the role, our Talent Acquisition team will reach out to you directly.

История на обявата

  • 7 ноември 2026 г.Появи сеобхождане

Очаквано възнаграждение

Обявата не посочва заплата. Оценката по-долу е за GRC / Compliance / Risk на ниво Senior според бенчмарка на CSF.BG — не е предложение на работодателя.

€2,200 – €4,200нето/месец · 5+ години опит
Средно търсене·Всички нива за ролята

Няма нито една обява за тази роля и ниво с публикувана заплата, с която да се сравни.

Знаеш колко се плаща за такава роля? — анонимно, за да станат тези числа по-точни.