Trust & Compliance Manager – Data Protection & IT Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate closely with the Data Protection Officer, Chief Technology Officer (CTO), and Chief Privacy Officer (CPO).

• Execute the operational implementation of data protection and IT compliance procedures, aligning with GDPR, AI Act, and U.S. higher-education standards such as HECVAT and SOC 2.

• Address security and privacy questionnaires, including HECVAT, VPAT/WCAG, and other related assessments.

• Engage in technical discussions with IT security officers at universities and hospitals.

• Develop and sustain a centralized Trust & Compliance knowledge repository, including a process for maintaining its currency.

• Keep accurate records and registers, such as RoPA (records of processing activities), subprocessors, certificates, data deletion policies, TOMs (technical and organizational measures), and incident documentation.

• Manage data subject requests operationally.

• Evaluate new IT and AI tools from various business units.

• Create a centralized contract register containing standard and tailored agreements, DPA versions, and analyses of deviations.

• Update DPA appendices from a technical standpoint.

• Develop scalable processes and strategically leverage AI and automation tools, such as for document comparison and drafting.

⛳️ Requirements

• Approximately 3–5 years of experience in IT compliance, governance, risk management, information security, privacy operations, or third-party risk, preferably in a SaaS/software setting.

• Familiarity with responding to enterprise security questionnaires, such as HECVAT, VSA, and SIG.

• Strong technical knowledge, including encryption, SSO, hosting, and backup solutions.

• A law degree is not mandatory.

• Proficient in both German and English, written and spoken, at a minimum C1 level.

• Confident and critical use of AI tools.

• Ability to work independently and self-motivated.

• Structured approach to prioritization.

• Professional demeanor in direct interactions with customers and IT stakeholders.

• Experience with automation tools like n8n or Zapier, or GRC platforms such as Vanta or Drata is advantageous.

🏝️ Benefits

• Flexible working hours that accommodate your semester schedule, including during exam periods when you can reduce hours.

• Opportunity to share innovative ideas and drive change.

• Complimentary access to the complete Lecturio learning platform for personal and professional growth.

• Participation in team and company events.

• Free beverages and fruit available in the office.

• Access to coaching sessions and additional mental health benefits at no cost.

• Potential to extend the collaboration beyond the initial 12-month fixed-term contract.