DPO & Compliance Officer

Filigran; France; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote-first

Flexible work

Twice-a-year gatherings

Job summary

Filigran is seeking a Data Protection Officer & Compliance Officer to design and run a scalable privacy program across its products and international footprint. You’ll lead privacy governance, drive DPIAs/ROPAs, oversee AI governance, cybersecurity regulation, and export controls, and collaborate with the GC, CISO, and product teams to embed regulatory requirements into development and operations.

You will report to senior leadership, manage privacy programs globally, and champion a proactive,

Qualifications

• 7–10 years as a DPO or data privacy lead in tech/SaaS
• Deep knowledge of GDPR, UK GDPR, DPIAs, ROPAs
• Experience with AI governance and regulatory programs (NIS2, sanctions)

Responsibilities

• Act as DPO and primary contact for authorities and data subjects
• Design and operate privacy program across products and operations
• Lead compliance controls for AI governance, resilience, export controls
• Maintain proportionate policies, risk mapping and monitoring
• Collaborate with Security, Product, Engineering to embed privacy/regulatory requirements
• Monitor EU/UK/US regulatory developments and advise leadership
• Support enterprise sales with privacy and compliance responses
• Leverage AI tools to improve workflows and productivity
• Contribute to integrating AI capabilities into internal processes

Skills

DPO leadership

GDPR & UK GDPR

DPIAs & ROPAs

AI governance

Regulatory programs

English & French

remote/async work

Job description

The CompanyFiligran, founded in October 2022, stands out in the cybertech ecosystem for its commitment to revolutionizing cyber threat management with a proactive approach. Its mission is to develop innovative open-source solutions designed to anticipate cyber threats, identify security gaps, and strengthen organizational security posture.

the company solutions are now trusted by over 6,000 public and private organizations worldwide.

The RoleWe’re looking for a DPO & Compliance Officer to design and implement the company’s practical, scalable compliance program.

You will be the company’s formal Data Protection Officer, ensuring strong privacy governance across our products, operations and international footprint. You will also lead the day-to-day design and delivery of broader compliance workstreams, including AI governance, cybersecurity regulation, operational resilience, export controls and sanctions.

You will work closely with the General Counsel, CEO, CISO, People, Product, Engineering and Sales teams, helping the company meet regulatory expectations in a business-minded attitude.

Your Responsibilities

• Act as the company’s Data Protection Officer and primary point of contact for supervisory authorities, including the CNIL, and for data subjects.
• Design and operate the company’s privacy program, including ROPAs, DPIAs, privacy by design, retention, data-subject rights, breach assessment and international data transfers.
• Lead the design and operational implementation of compliance controls across AI governance, NIS2, operational resilience, export controls and economic sanctions, under the General Counsel’s leadership.
• Maintain a proportionate compliance framework, including policies, risk mapping, monitoring plans, internal controls and clear reporting.
• Partner with Security to translate regulatory requirements into practical, business-enabling policies and controls that work for a fast-growing cybersecurity company.
• Partner with Security, Product and Engineering to embed privacy, AI and regulatory requirements into product development, vendor management and customer assurance.
• Monitor regulatory developments across the EU, UK, US and other relevant markets, and provide clear recommendations to the General Counsel and executive team.
• Support enterprise sales and procurement by responding to privacy, AI governance and compliance requirements.
• Leverage AI tools and methodologies to boost productivity and impact
• Contribute to building AI capabilities into internal workflows

Who You’ll Work With

You will have a split reporting line:

• For your statutory DPO responsibilities, you will report directly to the CEO. You will have the independence and access to senior management required to carry out those responsibilities.

• For all other compliance responsibilities, you will report to the General Counsel, who retains ultimate accountability for the company’s wider compliance programme and material compliance decisions.

You will work closely with the General Counsel, CISO, Security, Product, Engineering, Sales, People and Finance teams. You will lead delivery across the programme while knowing when to elevate decisions and draw on internal or external specialists.

Profile We’re Looking For

• 7 to 10 years’ experience as a DPO, data privacy lead or compliance officer, ideally in a fast-growing technology or SaaS company.
• Demonstrable expert knowledge of data protection law and practice. A recognized DPO certification or IAPP qualification, such as CIPP/E, is strongly preferred.
• Experience with a company-wide implementation of the EU AI Act.
• Deep, hands-on command of GDPR and UK GDPR, including ROPAs, DPIAs, breach management, data-subject rights and international transfers.
• Demonstrable ownership of at least two adjacent regulatory programmes, such as AI governance, cybersecurity regulation, operational resilience, export controls or economic sanctions.
• Able to lead unfamiliar workstreams with sound judgement and appropriate specialist internal or external support.
• Comfortable translating complex legal and regulatory requirements into proportionate controls that work operationally.
• Able to build strong relationships and credibility with technical, commercial and executive stakeholders.
• Comfortable working in a remote, async-first environment.
• Autonomy, ownership and team spirit.
• Strong interest in AI and its applications in the privacy & compliance function
• Comfortable working with and leveraging AI-powered tools (LLMs, automation, copilots, etc.) to improve workflows and productivity
• Bonus: experience in cybersecurity, threat intelligence or a technical B2B SaaS environment; fluency in English and French.

Why Join the company? More than just a job

We’re a fast-growing, global, and fully remote company building open-source cybersecurity solutions, increasingly powered by AI, to help defense teams anticipate threats and act faster.

What we believe

We believe we do work that matters, uniting defenders into a global community to make security more open, resilient & collaborative.

How we work

We do work that matters by combining strong engineering standards with emerging technologies, including AI, to move faster and smarter.

What guides us

We make our work matter by building a culture grounded in our CORE values of Cohesion, Openness, Responsibility, and Equity. The principles that guide how we make decisions, treat people, and grow together, especially when no one’s watching.

Compensation & Benefits

• Competitive pay + equity - everyone shares in our success

• Remote-first, flexible, and balanced - work that fits your life

• Your setup, your choice - pick the gear that works for you

• Twice-a-year gatherings - we meet in person for regional and global offsites to connect, collaborate, and strengthen our culture beyond the screen

Equal Employment Opportunity

We enable cybersecurity through inclusion - from code to culture.

At the company, we are proud to be an equal opportunity employer. We believe diversity of our people make our products and our team stronger. We welcome talent of every background, identity, and lived experience, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, or veteran status.

What matters here is what you bring, not what you look like, where you’re from, or how you identify.