Data Protection Associate - German speaking (all genders)

Your Day to Day:  

• Collaborate with Data Protection, Legal, and Security teams to ensure compliance with data protection laws, AI Regulation and other technical compliance topics, while supporting the development of sensible practices for compliance. 

• Assist Development and Product teams in aligning with data protection requirements and best practices, and support Serrala's transformation process for compliance. 

• Provide support to colleagues on data protection queries, new processing activities, and the investigation and resolution of compliance matters. 

• Aid in auditing, reviewing, and improving compliance-related policies, procedures, and controls, as well as conducting internal and external data protection and AI compliance risk assessments and audits. 

• Prepare and negotiate data processing agreements, review transfer impact/risk assessments, and manage subject access request process and individual rights. 

• Monitor compliance with data protection laws and policies, maintain records of processing activities and data protection and AI compliance documentation (e.g. TIA, LIA, FRIA, ROPA, AI Register), manage data breaches, and promote a culture of data protection compliance throughout the organization. 

• Understand and negotiate Serrala's customer-facing MSAs and other customer agreements vis-à-vis customers with a strong data protection focus. 

• Support and align with Serrala's Data Protection Officer. 

What makes you excel in this position:  

• Background: University degree in law (state exam, JD or bachelor's degree in law) and recognized data protection qualification (e.g. CIPP/E, CIPT, CIPM, TÜV Certified DPO). 

• Data-Protection: Prior work experience of at least three years in a law firm or in-house legal team with a focus on data protection. 

• Audits & Legislation: Sound knowledge and practical experience with the implementation and audit data protection legislation matters (particularly, in DACH region). 

• AI regulations: Experience with data protection regulations and AI-related regulatory requirements. 

• Soft skills: Good communication and interpersonal skills are essential, as you will need to build and maintain relationships both internally and externally. 

• Self-starting: Organized and able to work proactively to effectively coordinate/resolve activities with the aim of supporting business objectives and timelines, in a compliant manner. 

• Strong communicator: Excellent spoken and written German skills and excellent spoken and written English skills. 

Welcome additional experience: 

• Experience with or knowledge of ISO27000's family of standards. 

• Experience with or knowledge of BSI Standards or EU recognized certification mechanisms. 

• Experience with FinTech-related regulations/guidelines and understanding of their impact in data protection compliance practices. 

• Experience with implementing or knowledge of Privacy Maturity Models.