Privacy & Compliance Specialist – GDPR/ISO27001

XUND; Wien; Hybrid; EUR 60.000 - 85.000; Vollzeit

Benefits dieser Stelle

VSOPs (Virtual Stock Option Plans)

Training budget and professional dev.

Professional development time

Remote work option from home or Vienna

Zusammenfassung

XUND operates at the forefront of digital health, seeking a Data Protection & Compliance Specialist to strengthen GDPR compliance and support security management. You will define harmonized personal data handling across medical use cases and act as the go-to expert for data and security practices.

You will maintain privacy docs, collaborate on audits, assess third-party risks, and champion privacy initiatives while enabling product teams to embed privacy-by-design in development efforts.

Qualifikationen

• Solid understanding of EU data protection law and related cybersecurity concepts.
• Hands-on GDPR documentation and data processing agreements experience.
• Experience with security compliance frameworks and IT governance.
• German B2+ proficiency for collaboration on privacy and security docs.
• Experience working with software development, IT infra, and agile teams.

Aufgaben

• Maintain user-facing and internal privacy documentation, including privacy policy and DPIAs.
• Collaborate on ISO27001, C5 and related audits; support internal audits.
• Conduct third-party risk assessments and security reviews of third‑party agreements.
• Promote a culture of compliance and risk awareness across the org.
• Help build privacy-by-design into products from conception to delivery.
• Coordinate external audit efforts and serve as main contact to audit firms.

Kenntnisse

GDPR documentation

Data protection

Security frameworks

DPA knowledge

Analytical skills

Collaboration

German B2

Tools

ISO27001

C5

Cyber Resilience Act

Jobbeschreibung

XUND operates at the forefront of digital health, seeking a Data Protection & Compliance Specialist to strengthen GDPR compliance and support security management. You will define harmonized personal data handling across medical use cases and act as the go-to expert for data and security practices.

You will maintain privacy docs, collaborate on audits, assess third-party risks, and champion privacy initiatives while enabling product teams to embed privacy-by-design in development efforts.