Senior Legal & Compliance Manager

This is a fully remote position, open to applicants in Germany.

📋 Description

• Responsible for overseeing legal, compliance, data protection, and information security matters across the group’s companies.

• Formulate, execute, and monitor policies related to compliance, data protection, and information security.

• Perform risk assessments along with compliance and security audits.

• Review, draft, and negotiate contracts, emphasizing data protection, liability, and security clauses.

• Ensure adherence to GDPR and BDSG while implementing suitable technical and organizational measures.

• Maintain and enhance the Information Security Management System (ISMS) in line with ISO/IEC 27001.

• Prepare for and assist in certification and surveillance audits.

• Provide legal advice to management and business units regarding employment, contract, and corporate law matters.

• Conduct training sessions to raise employee awareness.

• Handle compliance inquiries and reports, and facilitate internal and external audits.

• Stay updated on legal and regulatory changes and formulate actionable recommendations.

• Act as the primary contact for audits and supervisory as well as data protection authorities.

• Collaborate closely with and offer professional support to the Legal & Compliance team.

⛳️ Requirements

• A university degree in law, economics, or a related discipline, such as business law, LL.B./LL.M., or business lawyer.

• Fully qualified lawyer (Volljurist) is preferred but not mandatory.

• Several years of experience in compliance, information security, data protection, and/or contract management.

• Ideally, experience within the software or technology sector.

• Strong understanding of relevant laws and standards pertaining to data protection and IT security.

• Solid grasp of the ISO/IEC 27001 standard suite.

• Exceptional analytical abilities and meticulous attention to detail.

• Hands-on approach to tasks.

• Excellent verbal and written communication skills in both German and English.

• A proactive team-oriented working style.

• Capability to clearly explain complex issues.

• Knowledge of international business law is advantageous.

• Experience in enterprise risk management is a plus.

• Familiarity with ESG reporting and sustainability standards is beneficial.

• Understanding of quality and occupational health & safety management is a plus.

• Practical experience with compliance and GRC tools is an advantage.

• Basic knowledge of cybersecurity topics is a bonus.

• Experience with or a willingness to be appointed as an Information Security Officer is a plus.

🏝️ Benefits

• 30 days of vacation.

• Flexible working hours.

• Special days off on Christmas Eve and New Year’s Eve.

• Supportive and ambitious team environment.

• Opportunity for influence and decision-making.

• Benefits aimed at enhancing personal well-being.

• Company culture prioritizing performance, health, and enjoyment at work.

• Inclusive workplace where everyone can realize their potential.