Senior Data Protection & Privacy Lead (GDPR)

Bitvavo; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Bitvavo in Amsterdam is seeking a senior Data Protection Officer to lead and mature its data protection program, ensuring GDPR compliance across the business. You will own policies around data access, lifecycle, classification and quality, reporting to the Head of Legal and collaborating with multiple units.

The role requires a qualified lawyer with at least seven years in data protection, including five within the EU, and experience engaging with data protection authorities.

Qualifications

• Qualified lawyer with a law degree and 7+ years in data protection.
• Minimum 5 years EU experience, with preference for Dutch market.
• Proven record engaging with data protection authorities on compliance matters.
• Experience with regulated entities in tech or ecommerce.

Responsibilities

• Advise and guide Bitvavo on policies and standards to meet data protection obligations.
• Engage with data protection authorities with regular briefings and maintain GDPR compliance records.
• Organise training and awareness on data protection across the company.
• Build a culture that embeds data protection and privacy, acting as the compliance champion.
• Communicate privacy implications of new technology to technical and non-technical audiences.
• Assist in addressing data breach notification and other legal issues.
• Challenge the status quo with pragmatic privacy solutions, including for ecommerce and AI projects.
• Devise privacy-preserving methods for using large datasets and translate law, statistics and business judgment into recommendations.

Skills

Data protection

GDPR

Regulatory compliance

Stakeholder management

Education

Law degree

Job description

Bitvavo in Amsterdam is seeking a senior Data Protection Officer to lead and mature its data protection program, ensuring GDPR compliance across the business. You will own policies around data access, lifecycle, classification and quality, reporting to the Head of Legal and collaborating with multiple units.

The role requires a qualified lawyer with at least seven years in data protection, including five within the EU, and experience engaging with data protection authorities.