Group DPO and Security Compliance Officer
Confirmo is a stablecoin payment platform that lets businesses accept, settle, and disburse stablecoins and cryptocurrencies globally.
Projects
About Confirmo
Confirmo serves businesses that need to send and receive cross-border payments using stablecoins and cryptocurrencies. Users can accept payments through a checkout gateway, manage incoming deposits at scale, and send bulk or programmatic payouts to wallets worldwide. The platform operates across multiple legal jurisdictions and supports various assets.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will serve as the Data Protection Officer for the Irish and UAE entities and deliver data-protection services across the group. You will manage GDPR and UAE data-protection compliance, data-subject requests, training, and policies. You will lead ISO 27001 and SOC 2 certification work, maintain DORA compliance, write security policies, support enterprise security reviews, maintain the Trust Page, and represent the security and compliance programme to regulators, auditors, and clients.
Requirements
- Experience as a DPO in the EU
- Willingness to learn UAE data-protection law
- 6+ years of security governance, risk, and compliance experience in a regulated fintech, payments, or technology environment
- Experience personally taking an organisation through ISO 27001 and/or SOC 2
- Experience writing data-protection and security policies and procedures and mapping controls across multiple frameworks
- Ability to communicate credibly with regulators, enterprise clients, and security teams
- Understanding of modern security fundamentals in a cloud-native company
- Fluent written and spoken English
Responsibilities
- Own group GDPR and UAE data-protection compliance
- Act as DPO for the Irish and UAE entities
- Respond to data-subject requests and conduct data-protection training
- Review and update group-wide data-protection policies and procedures
- Manage ISO 27001 and SOC 2 controls, evidence collection, audit preparation, external auditors, and recertification
- Handle enterprise security questionnaires, due-diligence calls, and security reviews
- Support sales on certification-dependent deals
- Maintain and improve DORA compliance
- Evaluate applicable security and operational-resilience frameworks and regulations
- Review contractual data-protection clauses
- Author, maintain, and version group information-security policies, standards, and procedures
- Build and maintain the public Trust Page
- Lead compliance discussions with regulators, auditors, and clients