Data Protection Officer - Remote-First

EPI Company; Germany (OH); Remote; USD 93,000 - 141,000; Full time

Job summary

A leading digital payment initiative is seeking a Data Protection Officer to ensure compliance with GDPR and other laws. This role involves managing data protection strategies, leading policy implementation, and handling regulatory queries. Ideal candidates have a law degree, relevant certifications, and experience in regulated payment environments. You will work remotely with quarterly in-person meetings in Europe.

Qualifications

• At least 10 years of post-qualification experience in private practice or in-house roles.
• Experience in regulated payments companies.
• Experience handling large-scale data protection programs across jurisdictions.

Responsibilities

• Oversee and manage the organization’s data protection strategy.
• Lead in the implementation of data protection policies.
• Provide data protection training.

Skills

Project management

Relationship-building

Communication

Risk assessment

Agile operation

Education

Law degree

CIPP/E certification

CIPM certification

CIPT certification

Job description

Data Protection Officer – Remote-First

We usually respond within three days

Be part of a movement to change the way Europe pays

In today’s digital world, payments often still feel outdated: random delays and confusing rules make it harder than it should be to pay and get paid. The European Payments Initiative (EPI) is here to change all that, forever.

With Wero, our digital wallet, we make sending and receiving money simple, seamless and secure across France, Belgium and Germany, with more countries and omnichannel solutions coming soon. Supported by 14 major banks and the two largest European acquirers, EPI is building a new, proudly European payment system: easy, instant and transparent, all for the greater good.

What's in it for you

Working on an exciting mission of EPI - empowering European financial sovereignty. Be part of a legal team where your opinion matters, and you will immediately be able to make an impact and see results.

At EPI, we embrace a remote-first culture, enabling our teams to work remotely from the country they are based in, with in-person meetings at least once a quarter to foster collaboration and connection.

Your impact

You will play a critical role in ensuring that our organization complies with GDPR, PSD2, and other data protection laws, while balancing data security with operational efficiency. You will notably:

• Oversee and manage the organization’s data protection strategy
• Lead in the implementation of data protection policies
• Provide data protection training
• Manage data breach responses

Additionally, you will:

• Handle individuals' requests regarding their personal data and the exercise of their rights
• Be the main point of contact for regulatory bodies for privacy matter
• Work closely together with the legal, compliance and risk teams in ensuring overall organizational regulatory risk awareness

For legal and compliance reasons, you will be expected to work in one of the following countries: Belgium, France, Germany, Netherlands, Spain.

• Completed various DPIA’s for our product
• Implemented several privacy related policies
• Discussed privacy matters with the EPI members in France, Germany, Belgium and The Netherlands.

To succeed, you should meet at least 70% of these requirements

• At least 10 years of post-qualification experience in private practice or in-house roles
• Experience within a payment scheme or regulated payments company (strictly AISP and PISP) in Germany, France, Belgium or Netherlands
• Experience in handling large-scale data protection programs and incidents across various jurisdictions and countries, also dealing with EU regulators
• Outstanding project management and organisational skills to operate with agility, accuracy and efficiency within a fast-paced, constantly evolving environment
• Excellent communication and relationship-building skills with international colleagues and business partners, to communicate complex issues in a simple and clear manner
• You are business-savvy, a strategic thinker and a keen problem-solver who knows how to assess risk and recommend a risk-based solution quickly, while striving for continuous improvement
• As well as having a Law degree, your certifications should include CIPP/E, CIPM, CIPT, or other data protection and privacy certifications (e.g., GDPR Practitioner, CDPSE)
• Fluent in English (additionally, French, German or Dutch is appreciated)
• Thrive in a fully remote, multicultural environment (while being willing to travel once per quarter at a minimum)

About the team

The DPO, while being independent, is part of the Legal team that consists of a small group of multicultural legal experts coming from diverse backgrounds. Our vision is to be a trusted business partner, who is reliable, accessible and strives for excellence. We will uphold the following values towards each other in the team, our internal clients and external clients: Ownership, Integrity, Reliability, Balance and Trust.

???? If this looks like you, the recruitment steps are:

1. A first call with one of our recruiters
2. An interview with the Hiring Manager (General Counsel), focused on the expertise and cultural fit with the team and EPI
3. An interview with the current DPO, focused on your experience and expertise
4. Possibly, an interview with an Executive
5. Hopefully, an offer you can’t refuse

Turn back if …

• You’re looking for an already highly structured environment with no ambiguity
• You have not worked in a payment scheme or a payment company (AISP or PISP)
• You're not based in one of EPI hiring countries (Belgium, France, Germany, Netherlands, Spain)

Otherwise apply!

???? Our commitment to equal employment opportunities

EPI offers the same job opportunities to all, without distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age. EPI promotes the development of an inclusive work environment that mirrors the diversity of the clients our product is serving.