SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Pliant is a modular B2B payments platform combining commercial card issuing, payment accounts, FX, and spend management. Founded in 2020 and headquartered in Berlin, Pliant serves 5,000+ businesses and 40+ partners across Europe and the United States, issuing commercial cards in 13 currencies across 32 countries.
You will serve as the operational point of contact for Pliant's external data protection law firms (one covering EEA/UK, another covering US and state privacy laws), coordinating data protection requests and compliance measures across departments. You'll maintain records of processing activities and privacy compliance documentation required under EEA, UK, and US laws.
Key responsibilities include supporting Data Protection Impact Assessments (DPIAs) and evaluating new processing activities, including cross-border data flows (SCCs, UK IDTA, EU-US Data Privacy Framework). You'll act as the internal point of contact for day-to-day data protection questions, prepare and follow up on audits, training sessions, and notifications to supervisory authorities.
You will also support the development of a company-wide, multi-jurisdictional AI governance framework (processes, policies, roles). This includes assessing and classifying AI systems against regulatory requirements, particularly the EU AI Act and relevant US state regulations and UK guidance. You'll maintain an AI inventory and risk register, act as the interface between departments, IT, Legal, and external law firms on AI-related projects, and conduct risk assessments for AI use cases including conformity and impact assessments. You'll develop internal guidelines for responsible use of AI tools.
The role offers the opportunity to work in a growing team with significant responsibilities in a flat hierarchy with transparent communication. Benefits include flexible and remote work options, monthly mobility benefit, Wellhub membership, and a Pliant Card with monthly credit.
REQUIREMENTS:
- 3-5 years of professional experience in data protection, compliance, AI governance, or a related field (candidates with more experience may be considered for Senior-level position)
- Experience coordinating with multiple external law firms or DPOs across different jurisdictions is a plus
- Some experience with, or strong interest in, international data protection topics (UK GDPR, US privacy law) is an advantage
- Strong knowledge of AI regulation (EU AI Act) and interest in helping shape a developing function
- Analytical ability to assess and classify technical systems (deep technical degree not required; solid conceptual understanding of AI systems is sufficient)
