Data Protection & Compliance Specialist

XUND; Wien; Hybrid; EUR 60.000 - 85.000; Vollzeit

Benefits dieser Stelle

VSOPs (Virtual Stock Option Plans)

Training budget and professional dev.

Professional development time

Remote work option from home or Vienna

Zusammenfassung

XUND operates at the forefront of digital health, seeking a Data Protection & Compliance Specialist to strengthen GDPR compliance and support security management. You will define harmonized personal data handling across medical use cases and act as the go-to expert for data and security practices.

You will maintain privacy docs, collaborate on audits, assess third-party risks, and champion privacy initiatives while enabling product teams to embed privacy-by-design in development efforts.

Qualifikationen

• Solid understanding of EU data protection law and related cybersecurity concepts.
• Hands-on GDPR documentation and data processing agreements experience.
• Experience with security compliance frameworks and IT governance.
• German B2+ proficiency for collaboration on privacy and security docs.
• Experience working with software development, IT infra, and agile teams.

Aufgaben

• Maintain user-facing and internal privacy documentation, including privacy policy and DPIAs.
• Collaborate on ISO27001, C5 and related audits; support internal audits.
• Conduct third-party risk assessments and security reviews of third‑party agreements.
• Promote a culture of compliance and risk awareness across the org.
• Help build privacy-by-design into products from conception to delivery.
• Coordinate external audit efforts and serve as main contact to audit firms.

Kenntnisse

GDPR documentation

Data protection

Security frameworks

DPA knowledge

Analytical skills

Collaboration

German B2

Tools

ISO27001

C5

Cyber Resilience Act

Jobbeschreibung

XUND is a leading digital health scale-up that enables healthcare companies to digitize patient interactions and translate data into actionable insights.

It's our vision to empower patients to make better decisions. But we cannot do it alone: we need leaders, doers, and innovative minds to turn our vision into reality.

That is why we are looking for an ambitious, highly committed, and entrepreneurial team player who shares ourvalues of putting patients first, building an inspiring and open environment and challenging the status quo.

The Role

Join us as a Data Protection & Compliance Specialist to level up our GDPR compliance system and support our information security management system. Bringing in a collaborative approach, you will help us define a harmonized and actionable set of personal data handling processes for our various medical use cases. We set ourselves a high quality and security standard, and by providing clarity, you will become the go-to person for identifying responsible data and security practices.

Your Responsibilities

Maintain user facing and internal privacy documentation, including the privacy policy, records of processing activities, data protection impact assessments, and balancing tests.

Collaborate on our information security management system (ISO27001, C5, Cyber Resilience Act) and conduct internal audits.

Conduct third-party risk assessments and security reviews of third‑party agreements.

Promote a culture of compliance and risk awareness throughout the organization.

Tackle privacy related user concerns, and join product and development teams in building privacy-by-design into our products, championing privacy initiatives from conception through delivery.

Coordinate external audit efforts, be the primary point of contact between the audit firm and XUND.

Your Profile

Solid understanding of EU data protection law, the cloud business model, and related cybersecurity concepts.

Hands-on experience with GDPR documentation, security compliance frameworks, and data processing agreements.

Strong analytical and collaboration skills to translate requirements into XUND's ways of working.

B2+ German (required efficiently collaborate on privacy and security documentation).

Experience working with software development, IT infrastructure, and agile teams.

Resident in the European Union with a valid work permit.

Nice to have

Lead auditor (preferably for ISO27001) or similar certification, strong knowledge of ISO-based quality management systems.

Education or work experience in contracting law related to data protection.

Experience in a scale-up or fast-paced environment.

Fluency in spoken German.

Join one of Europe's leading healthtech scale-ups and make a real impact in a purpose-driven environment.

Take on exciting challenges while working in a dynamic space where creativity and fresh ideas are always encouraged.

Benefit from a dedicated training budget and professional development time, because we believe in growing together and supporting your skill-building journey.

Work where you are most productive - remotely from home or from one of our offices in Vienna, Budapest, and Berlin.

Connect with your team through company-wide celebrations and optional local gatherings, always packed with great food and zero pressure.

Be part of a vibrant, open culture with flat hierarchies and direct communication, where your voice matters and everyone's ideas are heard.

Plus, office dogs! Bring your four-legged friend to work or hang out with the resident dogs to break up the day.

Salary & Compensation

Our salary ranges are determined by role, level, and location. The minimum starting salary for this position is:

Willingness to overpay is given and depends on the respective qualification and experience. On top of that, we also let all our employees participate in our Virtual Stock Option Plans (VSOPs), ensuring that they can directly benefit from our collective success.

At XUND, we know that innovation happens when different perspectives come together. Whether you're a coding whiz, a health enthusiast, a spreadsheet guru, or a creative problem-solver, we value what you bring to the team. If you're excited about this role but feel like you don't check all the boxes, don't worry – we still want to hear from you! We're committed to fostering an inclusive space where everyone's contributions are valued and respected, and we encourage candidates of all backgrounds, identities, and experiences to apply. If you're eager to make an impact, we'd love to hear from you!