About Arbolus

Arbolus is reinventing the traditional and analog expert network industry by bringing technology to the forefront of knowledge sharing. Our platform helps hundreds of clients worldwide to connect with the best experts, collect high-quality insights faster, and streamline their processes using leading AI technology.

Headquartered in London, we are a venture-backed scale-up working with global consulting and leading private equity firms. With offices in Barcelona, New York, and Gurgaon, we have a truly international team of over 150 people.

Recently listed as one of Europe’s top 100 fastest-growing companies, we are building a team that can continue to support our ambitious growth plans.

About the role

We are seeking an experienced and proactive Data Privacy Manager to join our team. This role will be pivotal in shaping and driving our data privacy compliance program from the ground up. You will be responsible for designing and implementing data privacy policies, conducting risk assessments, and ensuring compliance with relevant data protection laws and regulations. This is a fantastic opportunity to make a significant impact on our company's data privacy practices and help us navigate the complexities of data protection in a fast-growing, technology-driven environment.

Key responsibilities you will be in charge of

• Develop and implement data privacy policies, procedures, and best practices, aligning with global regulations such as GDPR, CCPA, and others.
• Lead the setup and execution of our data privacy compliance program, including risk assessments, audits, and mitigation strategies.
• Draft, review, and negotiate Data Processing Agreements (DPAs) with clients and partners to ensure compliance with data protection laws.
• Conduct Data Protection Impact Assessments (DPIAs) to identify and manage risks associated with data processing activities.
• Analyze current processes and systems to identify gaps in data privacy compliance and recommend improvements.
• Collaborate with cross-functional teams, including legal, IT, and operations, to ensure data privacy principles are embedded in all aspects of the business.
• Prepare documentation and maintain records of compliance activities, including reports for internal and external stakeholders.
• Provide training and guidance to employees on data privacy best practices and regulatory requirements.
• Monitor changes in data protection laws and ensure that the company's practices adapt to new legal requirements.

About you

We are looking for a detail-oriented professional with a deep understanding of data privacy regulations and a proven track record in building data privacy frameworks. You should have a strategic mindset, strong project management skills, and the ability to work independently while influencing others in a dynamic environment. 

Requirements to succeed in this role

• Experience: At least 4 years of experience in data privacy or compliance with a focus on data privacy.
• Educational background: Degree in Legal, Business Administration, Compliance, or a relevant field.
• Technical knowledge: Strong understanding of global data protection regulations, including GDPR, CCPA, and others.
• Policy development: Experience in creating and implementing data privacy policies and compliance frameworks from scratch.
• Analytical skills: Ability to conduct detailed risk assessments and DPIAs, with strong analytical skills to identify and manage data privacy risks.
• Communication: Excellent written and verbal communication skills with the ability to explain complex concepts in a clear and concise manner.
• Collaboration: Proven ability to work effectively with cross-functional teams, including legal, IT, and operations.
• Project management: Strong organizational and project management skills with a focus on detail, capable of managing multiple projects simultaneously.
• Autonomy: Self-starter with a proactive approach, able to work independently with minimal supervision.

Nice to have

• Certification: Relevant certifications such as CIPP/E, CIPM, or other data privacy qualifications or interest in obtaining such certification(s).
• Industry knowledge: Familiarity with data privacy requirements in technology-driven or SaaS environments.
• Technical skills: Knowledge of data security practices and tools used for data protection. We are an ISO27001 certified organisation.
• Language skills: Native-level proficiency in English is required, additional language skills are a plus.

What we offer

• Variable bonus on top of your base salary
• 25 days of paid time off per year + all local bank holidays. Arbolus puts heavy emphasis on quality of life and wants to ensure everyone has a fair amount of time to recharge and relax
• Flexibility with local bank holidays
• Share option plan for all employees
• Private health insurance
• Flexible remuneration for meals and transport 
• Relocation package to help you with your move to Barcelona
• 2 weeks per year to work from abroad
• Top-notch equipment to make our work efficient and smooth (MacBook Air, Jabra 75 headphones set, etc.)
• Free coffee, tea, and snacks to boost our energy during the day
• Monday office breakfast to start our week and Friday lunch voucher
• Regular social activities are managed by our local Social Committees
• Language courses to extend our knowledge (English, Spanish, French and Catalan)
• Office First organization
• Discounts for Kleta, Urban sports, and various restaurants around the office 

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Arbolus is committed to providing reasonable adjustments for qualified individuals with disabilities, in our job application and/or interview process. If, due to a disability, you need assistance or adjustment in completing your application please email us at talent@arbolus.com. Please put "Reasonable Adjustment" in the subject line and provide a brief description of the type of assistance you need. Please note that this inbox is not monitored for application status update requests.

We are unable to sponsor or take over sponsorship of an employment Visa at this time. All job applicants must be authorised to work for any employer in the country where the position is indicated to be based.