DPO & Compliance Officer

This is a fully remote position, open to applicants in France, +2 more countries.

📋 Description

• Serve as Filigran’s Data Protection Officer and main liaison for supervisory authorities, including the CNIL, as well as data subjects.

• Develop and manage the privacy program, which encompasses ROPAs, DPIAs, privacy by design, retention policies, data-subject rights, breach assessments, and international data transfers.

• Lead the establishment of compliance controls related to AI governance, NIS2, operational resilience, export controls, and economic sanctions.

• Sustain the compliance framework, including policies, risk mapping, monitoring strategies, internal controls, and reporting procedures.

• Collaborate with the Security team to convert regulatory requirements into actionable policies and controls.

• Integrate privacy, AI, and regulatory mandates into product development, vendor management, and customer assurance processes.

• Keep track of regulatory changes across the EU, UK, US, and other pertinent markets.

• Offer guidance to the General Counsel and executive leadership team.

• Assist enterprise sales and procurement in addressing privacy, AI governance, and compliance needs.

• Utilize AI tools and methodologies to enhance productivity and effectiveness.

• Incorporate AI capabilities into internal workflows.

• Report statutory DPO responsibilities to the CEO and other compliance obligations to the General Counsel.

• Collaborate with the General Counsel, CISO, Security, Product, Engineering, Sales, People, and Finance teams.

⛳️ Requirements

• 7 to 10 years of experience as a DPO, data privacy leader, or compliance officer, preferably in a rapidly growing technology or SaaS organization.

• Proven expert knowledge of data protection laws and practices.

• Recognized DPO certification or IAPP qualification, such as CIPP/E, is highly preferred.

• Experience in implementing the EU AI Act across the organization.

• Profound, hands-on understanding of GDPR and UK GDPR, including ROPAs, DPIAs, breach management, data-subject rights, and international transfers.

• Demonstrated ownership of at least two related regulatory programs, such as AI governance, cybersecurity regulations, operational resilience, export controls, or economic sanctions.

• Capability to lead unfamiliar workstreams with sound judgment and appropriate specialist support, either internal or external.

• Ability to translate complex legal and regulatory requirements into proportionate operational measures.

• Skill in building relationships and credibility with technical, commercial, and executive stakeholders.

• Comfortable working in a remote, asynchronous-first environment.

• Exhibits autonomy, ownership, and a collaborative spirit.

• Strong interest in AI and its implications for privacy and compliance.

• Proficient in using AI-powered tools, including LLMs, automation, and copilots.

• Bonus: experience in cybersecurity, threat intelligence, or a technical B2B SaaS setting.

• Fluency in English and French is an added advantage.

🏝️ Benefits

• Competitive salary plus equity.

• Remote-first work culture that is flexible and balanced.

• Choice of work equipment and gear.

• Biannual regional and global in-person offsite events.

• Participation in equity programs.

• Flexible working arrangements.

• Opportunities for global and regional gatherings.