SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Bitpanda is Europe's leading multi-asset investment platform, serving over 7 million customers across cryptocurrencies, stocks, precious metals, and commodities. Founded in 2014 in Vienna, the company operates at the intersection of fintech, Web3, and AI, with Series C funding and offices across Europe.
In this lead role, you will define and execute the global data protection strategy for the Bitpanda Group. You will serve as the official Group Data Protection Officer and primary point of contact for supervisory authorities across Europe, the UK, and the UAE. This is a strategic position that balances regulatory compliance with business enablement, ensuring the company's innovative product pipeline scales securely in line with GDPR and emerging regulatory frameworks.
Key responsibilities include:
• Design, implement, and evolve the Group's enterprise-level data protection management system (DPMS), ensuring a robust internal compliance framework across all international markets.
• Serve as the official Group DPO and primary liaison with data protection supervisory authorities. Lead responses to high-level inquiries and regulatory audits.
• Partner directly with the C-suite, engineering, and product divisions to provide pragmatic, solution-oriented privacy advice on complex initiatives at the intersection of data privacy, blockchain technology, and AI.
• Own the Group's data protection control framework, oversee regular monitoring and control testing, drive remediation of identified gaps, and report on framework effectiveness to senior management.
• Oversee escalation of complex data subject access requests (DSARs), lead incident response strategy for personal data breaches, and handle high-stakes negotiations for critical data processing agreements (DPAs) and international data transfers.
• Monitor the rapidly shifting regulatory landscape in the digital asset space and data protection. Translate complex legal developments into actionable business strategies and drive company-wide privacy training and awareness initiatives.
The role offers hybrid flexibility with 25 additional days per year to work from a city or country of your choice, competitive total compensation aligned with Bitpanda's pay-for-impact policy including stock options, mental health support, unlimited Udemy access, and other benefits including free onsite dining in Berlin.
REQUIREMENTS:
• 7+ years of experience in data protection, ideally with a mix of top-tier international law firms, regulatory authority, and in-house legal or privacy departments. Must have experience as an appointed Data Protection Officer.
• Strategic management experience navigating complex regulatory environments surrounding digital assets and regulated financial services. Ability to balance aggressive business growth with strict risk and compliance frameworks.
• Pragmatic problem-solving approach: deliver precise, reliable, and commercially viable legal advice while managing multiple competing priorities.
• Fluent in English; C1 or higher level of German is mandatory.
• Recognized privacy certifications (e.g., CIPP/E, CIPM) are highly advantageous.
