Data Protection Associate — Remote, DPO-Level

Assenteo; United Kingdom; Remote; GBP 45,000 - 60,000; Full time

Job summary

Assenteo is seeking a Data Protection Associate to lead privacy for a portfolio of startup clients. You’ll act as day-to-day privacy lead, spotting needs before clients ask and contributing to new work. You’ll work with the Founder and CEO on strategic matters, shaping privacy at scale in an AI-first environment.

You’ll own DPIAs/ROPAs, policies, and DPAs, review AI use cases for privacy risk, and help win new business with a share of revenue. Fully remote, UK/EU hours, competitive career path.

Qualifications

• Around three years of experience in data protection, privacy or compliance.
• Practical, working knowledge of GDPR and UK GDPR.
• Confidence working directly with founders and senior stakeholders.
• Proven ability to juggle several clients and find the next piece of work without being asked.
• Clear writing that turns complex legal points into practical advice.
• A growth mindset and ease with change and uncertainty.

Responsibilities

• Set up privacy programs and advise on GDPR, UK GDPR, CCPA and EU AI Act compliance, turning requirements into practical steps for product and engineering teams.
• Own DPIAs, ROPAs, gap analyses, privacy policies, notices and procedures.
• Review and negotiate DPAs.
• Review new products and features, including AI use cases, and advise client teams on privacy risk.
• Handle privacy pushback from clients' customers, including security questionnaires, FAQs and trust centres, so privacy helps close deals rather than slow them down.
• Keep SOC 2 and ISO 27001 documentation current and clients audit-ready.
• Support readiness assessments and implementation against AI governance frameworks such as ISO 42001 and A-RAiA.
• Coordinate incident response and breach management.
• Spot new work within existing clients and help win new ones.
• Track regulatory change and find where AI tools can replace manual steps.

Skills

Data protection

Privacy compliance

GDPR knowledge

UK GDPR knowledge

Stakeholder management

Clear writing

Growth mindset

Education

Law degree or equivalent practical experience

Job description

Assenteo is seeking a Data Protection Associate to lead privacy for a portfolio of startup clients. You’ll act as day-to-day privacy lead, spotting needs before clients ask and contributing to new work. You’ll work with the Founder and CEO on strategic matters, shaping privacy at scale in an AI-first environment.

You’ll own DPIAs/ROPAs, policies, and DPAs, review AI use cases for privacy risk, and help win new business with a share of revenue. Fully remote, UK/EU hours, competitive career path.