Head of Compliance & Data Protection

Location: We are flexible! Come and join us either in Hamburg, Berlin or Barcelona

We are looking for a Head of Compliance and Data Protection to lead and oversee compliance and data protection efforts across multiple European markets. 

This central and strategic role requires a strong blend of legal expertise, business acumen, and risk management skills to ensure our operations comply with GDPR, CSRD, AI Act, DSA, and other industry regulations.

You will work closely with leadership, product, tech, operations, and external stakeholders to embed a strong compliance culture while supporting our business model. To succeed, you must be a reliable professional with excellent interpersonal skills, confident in speaking your mind and standing by your decisions. If you excel in fast-paced environments, balancing regulatory compliance with business needs, we would like to meet you.

YOUR DAILY ADVENTURES WILL INCLUDE:

• Ensure compliance with data protection laws (B2C focus) and corporate compliance regulations.
• Monitor, enhance, and develop the Compliance Management System (CMS) to effectively mitigate risks.
• Stay ahead of regulatory changes (e.g., GDPR, CSRD, AI Act, DSA) and assess their business impact.
• Advise senior leadership on compliance risks, providing practical and strategic solutions.
• Develop and implement policies, internal controls, and best practices across multiple European markets.
• Lead and oversee audits, risk assessments, and investigations related to compliance and data protection.
• Act as the primary point of contact for data protection and regulatory authorities.
• Design and deliver training programs to educate employees on compliance and ethical business conduct.
• Report on data protection and compliance issues and recommend changes.
• Collaborate cross-functionally with tech, product, people, and information security teams to integrate compliance into business operations.
• Lead and mentor the compliance and data protection team, fostering a culture of accountability and ethical decision-making.

TO BE SUCCESSFUL IN THIS ROLE:

• 8+ years of experience in compliance and data protection leadership, ideally in a tech-driven or regulated environment.
• Deep knowledge of European compliance frameworks, including GDPR, CSRD, AI Act, and DSA.
• Proven experience in overseeing compliance and data protection across multiple markets.
• Strong investigative and analytical skills, with the ability to assess risks and provide actionable insights.
• Exceptional communication and stakeholder management skills, with the ability to influence decision making.
• Hands-on approach, comfortable navigating ambiguity and implementing compliance strategies in a fast-paced environment.
• Ability to multi-task, work independently, and collaborate effectively in a team.
• Professional certification (e.g., CCEP, CIPP/E, or similar) is a plus.
• Fluency in English and German is required; an additional European language is a strong advantage.

BENEFITS & PERKS IN A NUTSHELL:

• Flexible working arrangements

• LinkedIn Learning

• Sabbatical & special leave policies

• WeRoad partnership

• Birthday, 24th + 31st December off

• Short term EU work policy

• Mobility Credit

• Health Insurance

• Employee assistance program

Plus more local benefits depending on your work location!

DIVERSITY, EQUITY & INCLUSION:

FREENOW is an equal opportunity employer and we consider qualified applicants regardless of race, religion, national origin, gender, gender identity, sexual orientation, disability or age.
We want you to grow and evolve, bring your true self to work. 

SEE WHAT OUR AWESOME COLLEAGUES SAY ABOUT US: