Data protection and compliance Legal - Apprenticeship

Malt; Paris; Hybrid; EUR 13,000 - 23,000; Full time

Benefits offered by this job

Lunch vouchers

Hybrid remote policy

Paid vacation

Annual team building events

Books & learning stipend

Transportation reimbursement

Job summary

Malt’s Legal team in Paris is seeking a Master’s candidate or bar school student specializing in GDPR and digital regulatory frameworks. You will support data protection initiatives, review DPAs, and assist in regulatory monitoring within a fast-moving tech environment.

The role requires strong analytical skills, meticulous attention to detail, and fluency in English and French. It offers a hybrid work policy, internship-like learning, and opportunities to engage with cross-functional teams.

Qualifications

• You are currently enrolled in a Master’s degree (Master 2) or equivalent specializing in GDPR and digital regulatory frameworks.
• Strong attention to detail and analytical abilities for reviewing legal documents.

Responsibilities

• Assist with data protection and regulatory compliance initiatives.
• Conduct privacy risk assessments and review DPAs.
• Support Data Transfer Impact Assessments and vendor reviews.
• Update ROPA and privacy registers under DPO guidance.
• Monitor GDPR, EU AI Act and NIS2 developments and draft briefs.
• Assist with KYC/AML checks and internal ethics policy queries.
• Help design employee privacy-awareness training resources.

Skills

Attention to detail

Analytical skills

Bilingual English/French

Education

Master's degree in GDPR and digital regulatory frameworks

Job description

Discover our galaxy Join the Future of Work ! Malt is Europe's leading freelance marketplace, connecting over 1,000,000 talented freelancers with 100,000+ companies. Founded in 2013, we're transforming how work gets done through our tech-powered, human-centered platform. What makes us different:

• A diverse team of 600 Malters across 6 European countries
• A culture that champions equality (50% of our Comex are women) and inclusive growth
• Backed by top investors including ISAI, Serena Capital, Eurazeo Growth, Goldman Sachs, and BPI
• A mission to give everyone the freedom to work differently

Discover our galaxy Join the Future of Work ! Malt is Europe's leading freelance marketplace, connecting over 1,000,000 talented freelancers with 100,000+ companies. Founded in 2013, we're transforming how work gets done through our tech-powered, human-centered platform. What makes us different:

• A diverse team of 600 Malters across 6 European countries
• A culture that champions equality (50% of our Comex are women) and inclusive growth
• Backed by top investors including ISAI, Serena Capital, Eurazeo Growth, Goldman Sachs, and BPI
• A mission to give everyone the freedom to work differently

At Malt we believe that Ambition is the Way, so all lists of missions and responsibilities are non-exhaustive.

Explore your future career

Join Malt’s Legal team and work closely with our Data Protection Officer (DPO) and Compliance Officer.

• Help strengthen data protection and regulatory compliance across Malt’s operations.
• Contribute to practical GDPR compliance, third-party vendor reviews and the maintenance of privacy records.
• Support regulatory monitoring and internal compliance initiatives in a fast-moving, technology-driven environment.

Key Responsibilities

• Assist with the intake, verification and handling of Data Subject Access Requests (DSARs), ensuring they are logged and tracked within statutory deadlines.
• Conduct third-party vendor privacy risk assessments and review Data Processing Agreements (DPAs).
• Support Data Transfer Impact Assessments (DTIAs) and process assigned vendor reviews within the target five-day service level.
• Audit and update the Record of Processing Activities (ROPA) and other privacy registers under DPO guidance.
• Monitor relevant regulatory developments, including GDPR, the EU AI Act and NIS2, and prepare concise legal briefs.
• Support internal compliance queries, KYC/AML checks and ethics policies, as needed.
• Refresh internal policy guides and help design employee privacy-awareness training resources.

About You

• Currently enrolled in a Master’s degree ( Master 2) or École du Barreau (EFB / HEDAC, etc.) specializing in GDPR and digital regulatory frameworks.
• You bring strong attention to detail, analytical skills and the ability to review legal documents carefully.
• You have professional fluency in both English and French, written and spoken.
• You demonstrate discretion, high ethical standards, sound legal research and problem-solving skills.
• You are organised, able to prioritise in a fast-paced environment, and comfortable using technology platforms and SaaS tools.

Malt is the perfect space to thrive personally and professionally

• Onboarding: Before easing into your new role, you’ll spend your first week learning about our culture, products, and services with other onboardees at our office in Paris
• Paid vacation - 1 paid day/month worked for interns, 5 weeks/year for apprenticeships
• Lunch vouchers: €9/day on your Swile card
• Transportation: 50% reimbursement (any type of transport)
• Free books: If you’re interested in learning more about any topic relevant to Malt’s business, just tell us the books you’d like to read, and we’ll order them for you—without any questions asked or approval processes to follow
• Remote work: Hybrid remote policy
• Annual team building events

At Malt, we are committed to fostering an inclusive and diverse workplace. We recruit based on skills, experience, and potential, without any form of discrimination related to age, gender, sexual orientation, ethnicity, religion, or disability. Our mission is to create a work environment where everyone feels valued, respected, and safe to thrive.

Your profile may be subject to background screening. For more information see our candidate privacy policy.

We may use artificial intelligence tools to support parts of the hiring process, such as taking meeting notes. These tools assist our recruitment team but do not replace human judgment. If you do not want us to use AI, please send your resume at [e-mail].