Global Compliance & Data Privacy Lead (DPO)

Anthesis Group; Barcelona; On-site; EUR 90,000 - 120,000; Full time

Job summary

Anthesis Group is seeking a Global Compliance Manager to own and manage the company’s global compliance and data protection framework across all jurisdictions. This role ensures regulatory, privacy and due-diligence obligations are met, policies current, embedded, monitored and reported to leadership.

You will also hold the Data Protection Manager legal role, ensuring personal data risks are identified, controlled and improved within the ISMS, turning privacy obligations into security controls.

Qualifications

• Minimum 5 years' experience in a global / multi-jurisdictional compliance and/or data protection role.
• Strong data protection expertise (GDPR + international frameworks).
• Policy drafting, governance and monitoring experience.
• Able to advise senior stakeholders independently; detail-oriented and pragmatic.
• Excellent written and spoken English.

Responsibilities

• Maintain global compliance policies and control matrix; monitor adherence and report to leadership.
• Lead global privacy compliance and DPAs; oversee data protection program.
• Act as privacy and compliance contact for client due diligence and third-party risk.
• Coordinate with Legal, IT/Tech, Finance and business lines; support audits.
• Support ISO 27001 certification and surveillance audits and related privacy controls.

Skills

Global compliance experience

Data protection expertise

Policy drafting & governance

Stakeholder advisory

English proficiency

Job description

Anthesis Group is seeking a Global Compliance Manager to own and manage the company’s global compliance and data protection framework across all jurisdictions. This role ensures regulatory, privacy and due-diligence obligations are met, policies current, embedded, monitored and reported to leadership.

You will also hold the Data Protection Manager legal role, ensuring personal data risks are identified, controlled and improved within the ISMS, turning privacy obligations into security controls.