Data Protection Officer
Bitvavo helps Europeans trade and earn returns on digital assets through a regulated platform with low fees and multiple payment options.
About Bitvavo
Bitvavo is a cryptocurrency exchange for individuals and institutions looking to buy, sell, and manage digital assets. Users can trade over 350 cryptocurrencies, set up recurring purchases, and earn rewards on holdings through staking. The platform offers a simple interface and complies with local regulations to ensure a safe environment for digital asset management.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will drive and develop the data protection program, ensuring compliance with data protection and privacy laws including the GDPR. Reporting to the Head of Legal, you will work with business units and products, own processes and policies covering data access, classification, quality and life cycle management, and engage with regulators and the Management Board.
Requirements
- Qualified lawyer with a law degree
- At least 7 years of experience in data protection, including minimum 5 years within the EU
- Proven record of engaging directly with data protection authorities
- Experience handling data protection and privacy for a regulated entity, ideally tech or ecommerce
- Ability to analyze complex legal, regulatory and business issues under time pressure
- Experience managing multiple compliance projects, frameworks or teams and delivering training
- Knowledge of IT security and data analysis methodologies
- 5+ years of Dutch market experience is a strong preference
Responsibilities
- Advise and guide on policies and standards needed to meet data protection obligations
- Engage with data protection authorities and maintain records demonstrating GDPR compliance
- Organise training and awareness activities on data protection and privacy
- Build a culture that embeds respect for data protection and privacy
- Communicate privacy implications of new technology and proofs of concept to technical and non-technical audiences
- Assist with mandatory notification and legal issues in the event of a data loss or breach
- Devise creative, pragmatic solutions to data protection problems, including on ecommerce and AI projects
- Devise privacy preserving methods for using large data sets and turn data protection law into actionable recommendations
