Lead Legal Counsel Group DPO

Who we are  We simplify wealth creation. Founded in 2014 in Vienna, Austria by Eric Demuth, Paul Klanschek and Christian Trummer, we’re here to help people trust themselves enough to build their financial freedom — for now and the future. Our user-friendly, trade-everything platform empowers both first-time investors and seasoned experts to invest in the cryptocurrencies, crypto indices, stocks, precious metals and commodities they want — with any sized budget, 24/7. Our global team works across different cultures and time zones, bringing our products to more than 7 million customers, making us one of Europe’s safest and most secure platforms that powers modern investing.   Headquartered in Austria but operating across Europe, our products are built by fast-moving, talented, “roll-up-your-sleeves-and-make-it-happen” kind of people. It’s these diverse perspectives and innovative minds operating as ONE TEAM that keep Bitpanda at the cutting edge of our industry. So if you’re someone who thinks big, moves fast and wants to make an impact right from day one, then get ready to join our industry-changing team. Let’s go!  About the Role As Europe’s leading multi-asset broker, Bitpanda operates at the cutting edge of FinTech, Web3, and AI. With hyper-growth comes the responsibility of safeguarding our users' trust. In this lead role, you will define and execute the global data protection strategy for the Bitpanda Group. You will serve as the primary point of contact for supervisory authorities, and act as a crucial business enabler; ensuring that our innovative product pipeline scales securely and completely in line with the GDPR and emerging regulatory frameworks. What You’ll Do

Strategic Lead: Design, implement, and continuously evolve the Bitpanda Group's enterprise-level data protection management system (DPMS), ensuring a robust internal compliance framework across all international markets. Regulatory & Authority Liaison: Serve as the official Group Data Protection Officer and primary point of contact for data protection supervisory authorities across Europe, UK and the UAE. Lead the response to high-level inquiries and regulatory audits. Business Enablement & AI: Partner directly with the C-suite, engineering, and product divisions to provide pragmatic, solution-oriented privacy advice on complex, cutting-edge initiatives; specifically at the intersection of data privacy, blockchain technology, and AI. Control Framework & Monitoring: Own the Group's data protection control framework, oversee regular monitoring and control testing, drive remediation of identified gaps, and report on framework effectiveness to senior management to ensure continuous improvement. Operational Excellence: Oversee the escalation of complex data subject access requests (DSARs), lead the incident response strategy for personal data breaches, and handle high-stakes negotiations for critical data processing agreements (DPAs) and international data transfers. Awareness & Culture: Monitor the rapidly shifting regulatory landscape in the digital asset space and data protection. Translate complex legal developments into actionable business strategies and drive company-wide privacy training and awareness initiatives.

Who You Are

Extensive Legal Experience: You bring 7+ years of experience in data protection , ideally with a mix of top-tier international law firms, regulatory authority, and in-house legal or privacy departments and you acted as an appointed Data Protection Officer. Strategic Management: you navigate complex regulatory environments surrounding digital assets and regulated financial services. You understand how to balance aggressive business growth with strict risk and compliance frameworks. Pragmatic Problem Solver: You don't just point out legal roadblocks; you navigate them. You are known for delivering precise, reliable, and commercially viable legal advice while managing multiple competing priorities. Communication Skills: You are fully fluent in English and C1 or higher level of German is a must have.  Certifications: Recognized privacy certifications (e.g., CIPP/E, CIPM) are highly advantageous.

 What’s in it for you

Flexibility to work where you thrive – Enjoy the freedom of our Hybrid working model, combining onsite collaboration and remote work, with an additional 25 days per year to work from a city or country of your choice. Reward for your impact – Receive a competitive total compensation package aligned with Bitpanda’s pay-for-impact policy, including participation in our stock option plan. Support for your mental wellbeing – Access confidential coaching, counselling, and mental health resources whenever you need them through OpenUP. Time to recharge – On top of your standard annual leave, prioritise your wellbeing in 2027 with 3 additional days of paid time off to rest, reset, and recharge, available once you’ve been with us for 6 months. Continuous learning and growth – Grow your skills and stay ahead in your career with unlimited access to Udemy’s library of online courses at your own pace. Exclusive perks and rewards – Enjoy discounts, rewards, and perks from partners worldwide across life>

       .…and even more location-specific benefits designed to make life at Bitpanda even more rewarding wherever you are.   Above all, you will have the opportunity to learn and grow as part of Bitpanda’s incredible journey towards being Europe’s future #1 investment platform. Bitpanda is committed to fostering a fair and equal environment based on trust and mutual respect. We believe that a diverse and inclusive workplace is paramount to our success and we are committed to building a team that represents a wide variety of backgrounds, perspectives, and skills. * These benefits may be adjusted at Bitpanda’s discretion and do not apply to our internships and exceptions to our Hybrid Working policy apply to teams with shift schedules or for folks whose roles require them to be in-office (think: Workplaces team or IT).  

Apply Now: