PRIVACY & COMPLIANCE SPECIALIST

InPost Italy; Lombardia; On-site; EUR 120,000 - 190,000; Full time

Job summary

InPost Italy seeks a senior privacy and compliance professional to lead GDPR and Italian data protection initiatives. You will partner with the General Counsel and cross-functional teams to translate regulatory demands into practical, scalable controls.

The role covers DPIAs, RoPA, incident response, regulatory inquiries, and contract reviews, requiring autonomy, strong ethics, and business-minded legal judgment.

Qualifications

• Law degree required and admitted to practice.
• Minimum 10 years in privacy/compliance roles, in-house preferred.
• Certified expertise in GDPR and Italian data protection law.

Responsibilities

• Lead privacy and compliance program aligned with GDPR and Italian regulations.
• Manage DPIAs, RoPA, and data breach responses with the General Counsel.
• Coordinate with external DPO and regulatory authorities as needed.
• Review customer and supplier agreements for data protection provisions.
• Support investigations and cross-functional legal projects.

Skills

GDPR compliance

Italian data protection law

NIS2

AML requirements

Information security

In-house legal experience

Education

Law degree

Job description

InPost is a leading player in the business to consumer parcel delivery market. In Poland, they are successfully redesigning the last mile for e-commerce as the market leader. InPost covers the Italian market with a network of 5000 PUDOs (Pick Up and Drop Off points) and 5000 fully automated parcel lockers (that are accessible 24/7) enabling customers to collect, send and return parcels at their earliest convenience. The aim is to continue scaling InPost in the Italian market in a similarly rapid trajectory to that of Integer’s Polish home market. We’re passionate about our mission and products and our People are the reason we succeed. We’re looking for people with drive and curiosity, who will join us in re-writing the norm!

Job Overview:

We are looking for a senior professional with solid in-house experience and a strong business-oriented mindset, primarily focusing on privacy and compliance matters.

The successful candidate will join a Legal Department that acts as a true business partner to the company’s functions, helping translate regulatory and control requirements into practical, sustainable solutions aligned with the Company’s objectives.

In this context, in addition to overseeing privacy and compliance matters, the candidate will support the Legal team on broader and more general legal activities, including contract review and participation in cross-functional projects involving multiple departments.

We are seeking a professional who can manage assigned responsibilities with a high degree of autonomy, accountability, and prioritization skills, while ensuring ongoing alignment and coordination with the General Counsel.

The successful candidate will be responsible for supporting the Company in ensuring compliance with personal data protection regulations (particularly the GDPR and applicable Italian legislation), as well as other regulations relevant to the business. The role involves working closely with various departments across the organization and reporting directly to the General Counsel.

Key Responsibilities

Privacy

• Support the implementation and maintenance of a compliance program in line with the GDPR and other applicable privacy regulations.
• Monitor developments in data protection laws, regulations, and best practices.
• Conduct Data Protection Impact Assessments (DPIAs).
• Manage and respond to data subject rights requests, including requests for access, rectification, erasure, and data portability.
• Maintain and update records of processing activities (RoPA).
• Cooperate with the external Data Protection Officer (DPO).
• Manage data breaches in collaboration with the General Counsel, including the completion of ENISA risk assessments and notifications to the relevant authorities and affected data subjects where required.

Compliance

• Manage an effective compliance program based on Italian and EU legislation (e.g., Legislative Decree 231/2001, whistleblowing regulations, anti-corruption laws, etc.), industry-specific regulations (postal services and logistics), and Group policies.
• Monitor regulatory developments and compliance best practices relevant to the Company, assess the impact of legislative changes on business operations, and develop plans to ensure ongoing compliance.
• Maintain and update the Company’s Legislative Decree 231/2001 Organizational, Management and Control Model.
• Support the General Counsel in the management of whistleblowing reports and investigations.

Training and Awareness

• Develop and deliver periodic privacy and compliance training and awareness programs for employees.
• Create tailored guidance materials, communications, and practical tools to promote privacy and compliance awareness across the organization as needed.

Legal Support and Collaboration

• Provide legal advice and support to various business functions on privacy and compliance matters, as well as on broader legal and cross-functional topics, adopting a strongly business-oriented approach.
• Review and ensure that customer and supplier agreements include appropriate data protection and compliance provisions.
• Manage and respond to periodic information requests from regulatory authorities (e.g., the Italian Data Protection Authority and AGCOM), and support the General Counsel in interactions with such authorities and with the Supervisory Body (Organismo di Vigilanza).
• Support internal investigations relating to potential privacy and compliance breaches.

Key Skills:

• Qualifications and Skills
• Law degree.
• Qualified Attorney-at-Law (preferred) with prior in-house legal experience.
• At least 10 years of experience in privacy and compliance roles, preferably within the postal services or logistics industry.
• Demonstrated and certified expertise in GDPR compliance, Italian data protection legislation, NIS2, Legislative Decree 231/2001, whistleblowing regulations, and anti-money laundering (AML) requirements.
• Strong understanding of information security principles and data protection best practices.
• Knowledge of transportation and postal services law would be considered an advantage.
• High degree of autonomy, strong organizational skills, attention to detail, and ability to manage deadlines effectively.
• Ability to interact confidently with stakeholders at all levels of the organization and work collaboratively within a team environment.
• Strong professional ethics, excellent analytical skills, and outstanding written and verbal communication abilities.

Why Joining Us

At InPost, you will play a key role in shaping how millions of customers interact with last-mile delivery solutions. You will work in a fast-growing, innovative environment where your contributions directly support the company’s expansion and market presence. Our culture is built around five key behaviours, driven by a strong “Go Go Go” mindset focused on speed and determination.

Our Core Values

• Champion the Customer: Every decision and action begins with the customer in mind. We strive not just to meet expectations, but to exceed them.
• Dare to Disrupt: We embrace entrepreneurship, ambition, and a builder mindset. Innovation is about trying, failing, learning, improving, and succeeding together.
• Make it Happen: We thrive in a changing environment. We move fast, but not blindly. We reflect, learn, and adapt constantly. Speed matters – but smart, coordinated speed wins
• Own it: This is your company – act like it. We take initiative and full responsibility for our actions. We proactively act when we see something that is not right.
• Win Together: We are united by a shared winning mentality and a passion for our mission.
• We believe in the power of collaboration, respect and trust to achieve extraordinary results.