DPO & Compliance Officer

🌀 The Company Filigran, founded in October 2022, stands out in the cybertech ecosystem for its commitment to revolutionizing cyber threat management with a proactive approach. Its mission is to develop innovative open-source solutions designed to anticipate cyber threats, identify security gaps, and strengthen organizational security posture. Filigran solutions are now trusted by over 6,000 public and private organizations worldwide. 🎯 The Role We’re looking for a DPO & Compliance Officer to design and implement Filigran’s practical, scalable compliance program. You will be Filigran’s formal Data Protection Officer, ensuring strong privacy governance across our products, operations and international footprint. You will also lead the day-to-day design and delivery of broader compliance workstreams, including AI governance, cybersecurity regulation, operational resilience, export controls and sanctions. You will work closely with the General Counsel, CEO, CISO, People, Product, Engineering and Sales teams, helping Filigran meet regulatory expectations in a business-minded attitude. 💼 Your Responsibilities Act as Filigran’s Data Protection Officer and primary point of contact for supervisory authorities, including the CNIL, and for data subjects. Design and operate Filigran’s privacy program, including ROPAs, DPIAs, privacy by design, retention, data-subject rights, breach assessment and international data transfers. Lead the design and operational implementation of compliance controls across AI governance, NIS2, operational resilience, export controls and economic sanctions, under the General Counsel’s leadership. Maintain a proportionate compliance framework, including policies, risk mapping, monitoring plans, internal controls and clear reporting. Partner with Security to translate regulatory requirements into practical, business-enabling policies and controls that work for a fast-growing cybersecurity company. Partner with Security, Product and Engineering to embed privacy, AI and regulatory requirements into product development, vendor management and customer assurance. Monitor regulatory developments across the EU, UK, US and other relevant markets, and provide clear recommendations to the General Counsel and executive team. Support enterprise sales and procurement by responding to privacy, AI governance and compliance requirements. Leverage AI tools and methodologies to boost productivity and impact Contribute to building AI capabilities into internal workflows 🤝 Who You’ll Work With You will have a split reporting line: For your statutory DPO responsibilities, you will report directly to the CEO. You will have the independence and access to senior management required to carry out those responsibilities. For all other compliance responsibilities, you will report to the General Counsel, who retains ultimate accountability for Filigran’s wider compliance programme and material compliance decisions. You will work closely with the General Counsel, CISO, Security, Product, Engineering, Sales, People and Finance teams. You will lead delivery across the programme while knowing when to escalate decisions and draw on internal or external specialists. 🧬 Profile We’re Looking For 7 to 10 years’ experience as a DPO, data privacy lead or compliance officer, ideally in a fast-growing technology or SaaS company. Demonstrable expert knowledge of data protection law and practice. A recognized DPO certification or IAPP qualification, such as CIPP/E, is strongly preferred. Experience with a company-wide implementation of the EU AI Act. Deep, hands-on command of GDPR and UK GDPR, including ROPAs, DPIAs, breach management, data-subject rights and international transfers. Demonstrable ownership of at least two adjacent regulatory programmes, such as AI governance, cybersecurity regulation, operational resilience, export controls or economic sanctions. Able to lead unfamiliar workstreams with sound judgement and appropri