Lead Legal Counsel, Group Data Protection Officer

About the role

As the Group Data Protection Officer, you will define and execute Bitpanda's global data protection strategy, ensuring compliance with GDPR and emerging regulations while supporting innovative product development.

Key responsibilities

• Design, implement and continuously evolve the enterprise‑level Data Protection Management System across all markets.
• Serve as the primary liaison for supervisory authorities in Europe, the UK and the UAE, handling inquiries and audits.
• Partner with C‑suite, engineering and product teams to provide privacy advice on blockchain, AI and other cutting‑edge initiatives.
• Own the data protection control framework, monitor compliance, remediate gaps and report effectiveness to senior management.
• Oversee complex DSAR escalations, lead personal data breach response, and negotiate critical DPAs and international data transfers.

Required profile

• 7+ years of data protection experience, preferably with top‑tier law firms, regulators or in‑house privacy teams, and prior DPO appointment.
• Proven ability to navigate complex regulatory environments in digital assets and financial services.
• Fluent in English and German (C1 or higher).
• Relevant privacy certifications (e.g., CIPP/E, CIPM) are a strong advantage.

Required skills

• Deep knowledge of GDPR and European data protection law.
• Experience drafting and negotiating Data Processing Agreements and international data transfer mechanisms.
• Ability to provide pragmatic, commercially‑viable privacy advice on AI and blockchain projects.

What we offer

• Hybrid working model with flexibility to work from any city or country up to 25 days per year.
• Competitive total compensation, including stock option plan participation.
• Access to mental‑wellbeing resources, unlimited Udemy learning, and generous paid time off.
• On‑site dining in Vienna, Bucharest, Barcelona and Berlin, plus exclusive perks and company events.