Data Protection Associate – German speaking (all genders)

Serrala; Berlin; Hybrid; EUR 48,000 - 72,000; Full time

Job summary

Serrala, a global leader in finance process automation, seeks a Data Protection Associate to support compliance activities and privacy initiatives. The role focuses on AI-related regulatory requirements and cross-functional collaboration across Data Protection, Legal and Security teams.

This temporary maternity-cover position runs from 1 October 2026 to 31 December 2027 and is onsite/hybrid in Norderstedt or Berlin, Germany, with broader options in Europe.

Qualifications

• Bachelor's degree in law and data protection qualification advised (CIPP/E etc.).
• At least two years' work experience in data protection.
• Knowledge of data protection laws and AI-related regulations.

Responsibilities

• Collaborate with Data Protection, Legal and Security teams to ensure compliance.
• Assist Development and Product teams with data protection requirements.
• Support data processing agreements, data breach management, and records of processing activities.

Skills

Data protection

Audits & legislation

AI regulations

German language

English language

Education

Bachelor's degree in law

Recognized data protection qualification (e.g. CIPP/E, CIPT, CIPM, TÜV Certified DPO)

Job description

Location: This is a hybrid role.Possible locations: Berlin or Norderstedt, Germany (in-office or hybrid) preferred. Bucharest, Romania or Barcelona, Spain also possible (in-office or hybrid).

Contract: Fixed-term contract from 1st October 2026 until 31st December 2027 (temporary position to cover a maternity leave)

Language(s): English (C1/ C2) and German (C1/ C2)

Serrala is the global leader in finance process automation. For over 40 years, we have been advancing the office of the CFO with our award-winning suite of finance automation applications.

Our solutions streamline all working capital-related processes, including Order to Cash, Procure to Pay, Cash Flow Management, and Treasury, across both cloud and SAP environments.

Our 10+ hubs across Europe, North America, and India support over 2,800 clients worldwide, reflecting the trust we've built with a diverse global community.

Join us as we lead the future of finance automation!

About the role:

We are looking for a Data Protection Associate to support our compliance activities with a focus on privacy, and emerging AI-related regulatory requirements. In this role, you will help ensure compliance with applicable regulations, support internal stakeholders, and contribute to the continuous development of our compliance framework.

Please note: This is a temporary position to cover a maternity leave, with a fixed-term contract from 1st October 2026 until 31st December 2027.

This is an onsite/ hybrid role preferably in Norderstedt or Berlin, Germany.

Your Day to Day:

• Collaborate with Data Protection, Legal, and Security teams to ensure compliance with data protection laws and best practices, while supporting the development of sensible practices for compliance.
• Assist Development and Product teams in aligning with data protection requirements and best practices, and support Serrala's transformation process for compliance.
• Provide support to colleagues on data protection queries, new processing activities, and the investigation and resolution of compliance matters.
• Aid in auditing, reviewing, and improving compliance-related policies, procedures, and controls, as well as conducting internal and external risk assessments and audits.
• Prepare and negotiate data processing agreements, review transfer impact/risk assessments, and manage subject access request process and individual rights.
• Monitor compliance with data protection laws and policies, maintain records of processing activities, manage data breaches, and promote a culture of data protection compliance throughout the organization.

What makes you excel in this position:

• Background: Bachelor's degree in law (Staatsexamen or business Law qualification) and recognized data protection qualification (e.g. CIPP/E, CIPT, CIPM, TÜV Certified DPO).
• Data-Protection: Prior work experience of at least two years.
• Audits & Legislation: Sound knowledge and practical experience with the implementation and audit data protection legislation matters (particularly, in DACH region).
• AI regulations: Experience with data protection regulations and AI-related regulatory requirements.
• Soft skills: Good communication and interpersonal skills are essential, as you will need to build and maintain relationships both internally and externally.
• Self-starting: Organized and able to work proactively to effectively coordinate/resolve activities with the aim of supporting business objectives and timelines, in a compliant manner.
• Strong communicator: Excellent spoken and written German skills and good spoken and written English skills.

Welcome additional experience:

• Experience with or knowledge of ISO27000's family of standards.
• Experience with or knowledge of BSI Standards or EU recognized certification mechanisms.
• Experience with FinTech-related regulations/guidelines and understanding of their impact in data protection compliance practices.
• Experience with implementing or knowledge of Privacy Maturity Models.

Why you’ll love it here

Step into a dynamic, agile workplace where continuous learning is championed by leadership, and innovation in finance automation is fuelled by cutting-edge tech, AI integration, and strategic SAP transformation. We partner with the best to stay ahead - so you can too.

At our core, we're Reliable, Passionate, Empowering, Enterprising -committed to lasting customer and employee relationships, bold innovation, and your growth every step of the way.

EEO Statement

We are proud to be an equal opportunity workplace. We celebrate and support diversity by providing equal employment opportunities regardless of race, creed, color, religion, age, sex, national origin, disability or handicap, genetics, protected veteran status, sexual orientation, gender identity or expression, arrest record, or any other characteristic protected by federal, state, or local laws.

To all recruitment agencies

Serrala does not accept agency resumes. Please do not forward resumes to our job alias, Serrala employees or any other organization location. Serrala is not responsible for any fees related to unsolicited resumes.