DPO & Compliance Officer

h3The Company /h3 pbFounded in 2022, Filigran is a global cybersecurity company on a mission to empower defense teams to be proactive through open-source solutions that uncover threats and drive action. /b /p pFiligran stands out in the cybersecurity ecosystem through its open-source, AI-powered and threat-informed approach to Continuous Threat Exposure Management (CTEM). Our eXtended Threat Management (XTM) platform brings together threat intelligence, exposure validation and cyber risk reduction, enabling organizations to better understand their threat landscape and take action. /p pAt the heart of Filigran is our open-source approach. Our vision is to unite defenders into a global community to make security more open, resilient and collaborative. /p pAs Filigran continues to scale globally, we are building the organization, infrastructure and capabilities needed for our next stage of growth. How we scale matters just as much as how fast we scale: our CORE values: Cohesion, Openness, Responsibility and Equity shape how we work together, make decisions and build for the future. /p h3The Role /h3 pWe’re looking for a bDPO Compliance Officer /b to design and implement Filigran’s practical, scalable compliance program. /p pYou will be Filigran’s formal Data Protection Officer, ensuring strong privacy governance across our products, operations and international footprint. You will also lead the day-to-day design and delivery of broader compliance workstreams, including AI governance, cybersecurity regulation, operational resilience, export controls and sanctions. /p pYou will work closely with the General Counsel, CEO, CISO, People, Product, Engineering and Sales teams, helping Filigran meet regulatory expectations in a business-minded attitude. /p h3Your Responsibilities /h3 ul liAct as Filigran’s Data Protection Officer and primary point of contact for supervisory authorities, including the CNIL, and for data subjects. /li liDesign and operate Filigran’s privacy program, including ROPAs, DPIAs, privacy by design, retention, data-subject rights, breach assessment and international data transfers. /li liLead the design and operational implementation of compliance controls across AI governance, NIS2, operational resilience, export controls and economic sanctions, under the General Counsel’s leadership. /li liMaintain a proportionate compliance framework, including policies, risk mapping, monitoring plans, internal controls and clear reporting. /li liPartner with Security to translate regulatory requirements into practical, business-enabling policies and controls that work for a fast-growing cybersecurity company. /li liPartner with Security, Product and Engineering to embed privacy, AI and regulatory requirements into product development, vendor management and customer assurance. /li liMonitor regulatory developments across the EU, UK, US and other relevant markets, and provide clear recommendations to the General Counsel and executive team. /li liSupport enterprise sales and procurement by responding to privacy, AI governance and compliance requirements. /li liLeverage AI tools and methodologies to boost productivity and impact /li liContribute to building AI capabilities into internal workflows /li /ul h3Who You’ll Work With /h3 pYou will have a split reporting line: /p ul liFor your statutory DPO responsibilities, you will report directly to the CEO. You will have the independence and access to senior management required to carry out those responsibilities. /li liFor all other compliance responsibilities, you will report to the General Counsel, who retains ultimate accountability for Filigran’s wider compliance programme and material compliance decisions. /li /ul pYou will work closely with the General Counsel, CISO, Security, Product, Engineering, Sales, People and Finance teams. You will lead delivery across the programme while knowing when to escape decisions and draw on internal or external specialists. /p h3Profile We’re Looking For /h3 ul lib7 to 10 years’ experience as a DPO, data privacy lead or compliance officer, /b ideally in a fast-growing technology or SaaS company. /li liDemonstrable expert knowledge of data protection law and practice. A recognized DPO certification or IAPP qualification, such as CIPP/E, is strongly preferred. /li liExperience with a company-wide implementation of the EU AI Act. /li liDeep, hands-on command of GDPR and UK GDPR, including ROPAs, DPIAs, breach management, data-subject rights and international transfers. /li liDemonstrable ownership of at least two adjacent regulatory programmes, such as AI governance, cybersecurity regulation, operational resilience, export controls or economic sanctions. /li liAble to lead unfamiliar workstreams with sound judgement and appropriate specialist internal or external support. /li liComfortable translating complex legal and regulatory requirements into proportionate controls that work operationally. /li liAble to build strong rel