Compliance Associate II - 26366

Enverus; España; Presencial; EUR 42.000 - 62.000; Jornada completa

Descripción de la vacante

Enverus is seeking a motivated, mid-level Compliance Associate to join our legal and compliance team based in Spain or Czechia. You will lead GDPR and EU data protection matters, support AI governance, respond to DSARs, and help translate evolving EU regulations into practical policy updates.

The role requires collaboration across global teams and delivering training and documentation to strengthen our privacy program.

Formación

• 2-3 years of relevant work experience, ideally in data protection or privacy compliance.
• Bachelor's degree from an accredited college or university; working knowledge of GDPR and familiarity with EU AI Act.
• Based in Madrid, Spain, with fluency in English; able to collaborate across EU/US time zones.
• Independent worker with ability to escalate when needed.
• Organized and detail-oriented with multiple projects and deadlines.

Responsabilidades

• Assist in capture and retention of required certifications and reporting under compliance policies.
• Be the day-to-day GDPR compliance contact, maintain ROPAs, support DPIAs, monitor data processing activities.
• Support AI governance program, aid in risk classification and conformity documentation under the EU AI Act.
• Assist in responding to DSARs and coordinating with business units for timely responses.
• Maintain records of compliance approvals for research, marketing, and materials.
• Support updates to policies, procedures, and training on data protection and responsible AI.
• Monitor internal compliance systems to improve effectiveness and efficiency.
• Record activities under Code of Conduct and related policies, including trainings and attestations.
• Track EU and member-state data protection and AI regulation developments and translate to policy updates.
• Coordinate with legal, security, and business teams on compliance and privacy projects.
• Escalate issues to senior Compliance staff and participate in periodic training.
• Assist in responding to client questionnaires on data privacy and AI use.

Conocimientos

GDPR knowledge

AI governance

English fluency

Project management

Regulatory communication

Educación

Bachelor's degree

Descripción del empleo

Why YOU want this position

At Enverus, we're committed to empowering the global quality of life by helping our customers make energy affordable and accessible to the world.

We are the most trusted energy-dedicated SaaS company, with a platform built to maximize value from generative AI, and our innovative solutions are reshaping the way energy is consumed and managed. By offering anytime, anywhere access to analytics and insights, we're helping our customers make better decisions that help provide communities around the world with clean, affordable energy.

The energy industry is changing fast. But we've continued to lead the way in energy technology, creating intelligent connections across the entire energy ecosystem, from renewables, power and utilities, to oil and gas and financial institutions. Our solutions create more efficient production and distribution, capital allocation, renewable energy development, investment and sourcing, and help reduce costs by automating crucial business operations. Of course, this wouldn't be possible without our people, which is why we have built a team of individuals from a diverse range of backgrounds.

Are you ready to help power the global quality of life?Join Enverus, and be a part of creating a brighter, more sustainable tomorrow.

We are seeking a motivated, mid-level Compliance Associate to join our legal and compliance team, based in Spain or Czechia. This role supports the broader compliance program while serving as the team's lead associate for GDPR and other EU data protection matters, as well as emerging AI governance requirements including the EU AI Act. This is an opportunity to join a rapidly growing company delivering industry-leading solutions to customers in the world's most dynamic and fastest-growing sector. Enverus is the right company at the right time.

What you will do

• Assist in the capture and retention of required certifications, acknowledgments, reporting, and similar documentation required under compliance policies and procedures.
• Serve as a day-to-day point of contact for GDPR compliance matters, including maintaining records of processing activities (ROPAs), supporting data protection impact assessments (DPIAs), and monitoring data processing activities for adherence to applicable law and agreements.
• Support the company's AI governance program, including assisting with risk classification and conformity documentation under the EU AI Act, and monitoring adherence to internal AI use policies.
• Assist in responding to data subject access requests (DSARs) and coordinating with relevant business units to ensure timely, compliant responses.
• Maintain records of compliance approvals for research reports, marketing, advertising, and similar materials.
• Support the preparation and delivery of updated policies, procedures, and training programs, including those related to data protection and responsible AI use.
• Monitor internal compliance systems to ensure and improve the effectiveness and efficiency of compliance operations.
• Implement and record activities under the Code of Business Conduct, Vendor Code of Conduct, Privacy Policy, and other policies, including employee trainings, attestations, and books and records retention.
• Track developments in EU and member-state data protection and AI regulation (e.g., GDPR, EU AI Act) and help translate new requirements into practical policy updates.
• Coordinate with legal, security, and business teams across the company in support of compliance and privacy projects.
• Escalate issues to senior Compliance staff as needed, and participate in periodic compliance training for employees and new hires.
• Assist in responding to client questionnaires, including those related to data privacy and AI use.

What skills you should have

• 2 - 3 years of relevant work experience, ideally including exposure to data protection or privacy compliance.
• Bachelor's degree from an accredited college or university. Working knowledge of GDPR and familiarity with the EU AI Act, or strong interest in and aptitude for developing expertise in AI governance.
• Based in Madrid, Spain, with fluency in English (verbal and written); ability to work with EU and US colleagues across time zones.
• Works independently with general supervision, while knowing when to elevate to senior Compliance staff.
• Develops and implements processes, standards, or procedures efficiently and effectively to achieve compliance program goals.
• Organized and detail-oriented, with the ability to manage multiple projects and deadlines.
• Ability to strictly maintain discretion and confidentiality.
• Excellent communication skills, including the ability to explain regulatory requirements clearly to non-legal stakeholders.
• Ability to research regulatory developments and respond to issues and requests in a timely and efficient manner.

Skills that stand out

• A degree or coursework in law, data protection, or a related field.
• A privacy certification such as those offered by IAPP (e.g., CIPP/E).
• Experience with GDPR specifics such as standard contractual clauses, data portability requests, and privacy impact assessments.
• Familiarity or exposure to the EU AI Act and AI governance.