Devoteam Cyber Trust | Privacy Counsel (GDPR & Data Protection) | FinTech Sector

Devoteam
Porto
Workplace: HybridFull timeFunction: Legal, Risk & ComplianceExperience: 4-7 yearsEducation: professionalSkills: ["Drafting","Negotiation","Stakeholder management","Communication","Ownership"]

Advise the business across European markets on GDPR and national data protection laws, translating regulatory developments into practical policies. Own privacy governance by maintaining Records of Processing, drafting standards and privacy notices, and conducting DPIAs and risk assessments. Support privacy-by-design for products and AI initiatives, manage DSARs and end-to-end breach response, and draft DPAs and cross-border transfer mechanisms (including SCCs).

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Devoteam
Devoteam
17 hours ago

Devoteam Cyber Trust | Privacy Counsel (GDPR & Data Protection) | FinTech Sector

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Advise the business across European markets on GDPR and national data protection laws, translating regulatory developments into practical policies. Own privacy governance by maintaining Records of Processing, drafting standards and privacy notices, and conducting DPIAs and risk assessments. Support privacy-by-design for products and AI initiatives, manage DSARs and end-to-end breach response, and draft DPAs and cross-border transfer mechanisms (including SCCs).
Location: Porto
Workplace: Hybrid
Employment Type: Full time · Permanent
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Provide advisory and regulatory guidance on GDPR and national data protection laws across European markets, including interpretation, application, and legal opinions.
  • •Monitor and assess EU and national privacy developments (e.g., EDPB guidelines, supervisory authority decisions, ePrivacy, EU AI Act) and translate them into updated policies and practical guidance.
  • •Maintain privacy governance documentation including Records of Processing (RoPA) and draft/review group privacy policies, procedures, and privacy notices.
  • •Conduct and review DPIAs and legitimate interest assessments, identify risks, and recommend proportionate mitigation measures.
  • •Manage privacy operations including DSAR responses within deadlines, personal data breach process (triage to notifications), regulator liaison, and privacy training/awareness.

Key Requirements

  • •Law degree; qualification/admission in an EU jurisdiction is strongly preferred.
  • •4 to 7 years of relevant experience in data protection/privacy in-house and/or in a law firm or consultancy.
  • •Strong working knowledge of GDPR and national privacy laws in at least one relevant European jurisdiction.
  • •Experience in financial services, market infrastructure, or another regulated environment is an advantage.
  • •Fluency in English is required; additional European language (e.g., French, Dutch, Italian, Portuguese) is a strong plus.
Experience:4-7 yearsFinancial servicesRegulated environment
Education:Professional (JD, MD, etc.)
Skills:DraftingNegotiationStakeholder managementCommunicationOwnership
Certifications:ISO 27001ISO 9001PCI-DSSPCI-QSA
Languages:EnglishFrenchDutchItalianPortuguese
Tech Stack:GDPRData protectionEPrivacyEU AI ActData governanceRecords of Processing (RoPA)Article 30DPIALegitimate interest assessmentsPrivacy by designData subject requests (DSARs)SCCsStandard Contractual ClausesDPAsData processing agreementsTransfer impact assessmentsIncident response

Company Brief

Devoteam
Devoteam is an IT consulting firm specializing in digital transformation, cloud, cybersecurity, and data solutions for enterprise clients across Europe and the Middle East, combining technology partnerships with management consulting services.
Industry: Consulting
Company Size: Enterprise (1,001+ employees)
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Paris, France
Founded: 1995
WebsiteLinkedIn