Senior Privacy Counsel & DPO – ILA (Spain & Portugal) (Madrid)

Senior Privacy Counsel & DPO – ILA (Spain & Portugal) (Madrid)

04 ago
|
shine
|
Madrid

04 ago

shine

Madrid

ph3About Shine /h3pShine is the financial copilot for entrepreneurs and small business owners. /ppFounded by serial entrepreneurs Rico Andersen and Martin Hegelund, Shine is a leading European fintech unicorn on a mission to restore the joy of running a business, by ending wasted time on financial admin. Shine offers a connected solution for invoicing, accounting, payroll, business accounts, payments, and financing, meaning business owners can focus their energy on growing a healthy business, not held back by manual admin. /ph3Part of something bigger /h3pToday we're part of Cegid, a European leader in cloud software for finance and accounting. Together we're building Europe's leading financial copilot for small businesses and their accountants. /ppShine already supports more than 400,000 small businesses. As part of Cegid, we now reach over one million small businesses and 15,000 accountants across Europe. /ppWe're a multicultural team working from France, Germany, Denmark and the Netherlands, contributing to a wider European network that spans Spain, Portugal and Belgium. /ph3Your Hiring Experience Matters /h3pJust as we respect our customers' time, we respect yours. Your experience with Shine and Cegid should feel simple, transparent and genuinely supportive. /ph3The Banking Compliance team at Shine /h3pOver the next year, we will build a best-in-class banking compliance unit from the ground up, automating reporting cycles, eliminating noise, and freeing our team to do what matters most: generating the sharp, forward-looking insights that drive growth. This is a rare opportunity to shape not just a function, but a high-performing team culture, one where we consistently deliver and exceed our top-line targets. /ph3The Legal Privacy function /h3pSits within Shine's Banking Compliance division, operating across our European entities; France, Germany, Denmark, Spain and the Netherlands. /ppWe are a lean, senior team navigating real regulatory complexity: post-merger integration, AI governance, and rapidly evolving data protection landscapes. Privacy here is not a box-ticking exercise, it is a core part of how we scale responsibly across borders, and we expect the same standard from everyone who joins us. /ph3Your role as a Senior Privacy Counsel DPO – ILA (Spain Portugal) /h3pAs we scale rapidly across Europe, we are looking for a Senior Privacy Counsel DPO – ILA (Spain Portugal) to join our legal and privacy function. You will be the officially designated Data Protection Officer for all Spanish and Portuguese entities, declared to the relevant supervisory authorities (AEPD in Spain and CNPD in Portugal), while also serving as a hands‑on senior privacy expert across day-to-day operations and group-wide projects.



/ppYou will report directly to the Lead Privacy and you will have real influence in shaping how the group privacy function is built, while being the go‑to privacy authority for everything Spain and Portugal‑specific. In addition to that, you will bring only deep legal expertise, but a genuine drive to implement privacy management tools, design scalable processes, and identify where automation and AI can replace manual effort entirely. /ppJob located in Madrid /ph3What You’ll Be Doing /h3h3Day-to-Day Privacy Operations Statutory DPO /h3ulliAct as the officially designated DPO for our Spanish and Portuguese subsidiaries before their respective supervisory authorities (AEPD and CNPD) /liliTake full ownership of daily privacy operations: lead Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and manage internal privacy workflows and requests. /liliDraft, review, and negotiate Data Processing Agreements (DPAs) and privacy clauses with clients, vendors, and strategic partners. /liliOwn and continuously optimise the Spanish, Portuguese, and ILA regional Records of Processing Activities (ROPAs), ensuring accuracy, scalability, and audit readiness. /liliInvestigate and manage data breaches, security incidents, and complex Data Subject Requests (DSRs). /liliIdentify opportunities to automate privacy processes and implement scalable tools, ensuring efficiency and consistency in a lean team environment. /li /ulh3Cross-functional Business Partnering (Privacy by Design AI Enablement) /h3ulliPartner closely with Product and Engineering to embed Privacy by Design and by Default, particularly within AI-driven products and features. /liliAct as a key advisor on AI-related privacy risks and opportunities, ensuring compliant and responsible use of data in AI systems. /liliProvide pragmatic, business-oriented legal guidance to Marketing and Sales (e.g., cookie compliance, outreach regulations, consent frameworks). /liliCollaborate on the adoption of AI and automation tools within privacy operations, enabling smarter workflows and faster decision-making. /li /ulh3Group Privacy Construction, Automation Scaling /h3ulliWork closely with the Lead Privacy to build and scale a transversal Group Privacy program across multiple regions. /liliDrive the standardisation and automation of privacy processes, templates, and policies, reducing manual effort and increasing consistency. /liliTake a hands‑on role in implementing scalable frameworks, including AI Governance policies aligned with the EU AI Act. /liliAct as a builder,



designing and embedding tools, systems, and processes that allow a small team to operate with high impact. /li /ulh3MA and Organisational Transformation /h3ulliLead operational privacy workstreams during post-merger integrations and organisational scaling initiatives. /liliConduct privacy due diligence and assess existing frameworks across acquired entities. /liliExecute the migration and integration of privacy infrastructures, ensuring alignment with Group standards. /liliIdentify opportunities to streamline and automate legacy processes, accelerating integration and reducing operational complexity. /li /ulh3Experience /h3h3What You Bring /h3ulliMinimum of 4 years of hands‑on experience in a privacy role, preferably within a fast‑paced B2B tech company, Banking, SaaS environment, or a top‑tier law firm. Experience working with automation tools, AI‑driven solutions, or building scalable processes is a strong advantage. /li /ulh3Operational Grit /h3ulliYou are an individual contributor who enjoys the day‑to‑day operational work (drafting DPAs, updating ROPAs, answering product questions) just as much as high‑level strategy, and you proactively identify opportunities to streamline and automate workflows in a lean team environment. /li /ulh3MA/Integration Expertise /h3ulliProven track record of working through complex integration phases, major organisational restructurings, or MA activities in a pan‑European context, with the ability to simplify, standardise, and scale processes. /li /ulh3Legal Background /h3ulliStrong, practical knowledge of Spanish (LOPDGDD), Portuguese (Lei n.º 58/2019), and European (GDPR) data protection laws. A law degree from a European jurisdiction (Spanish or Portuguese legal qualification highly preferred). /li /ulh3Business Acumen /h3ulliAbility to translate complex legal requirements into actionable, business‑friendly solutions. Experience with AI regulations, AI governance, and SaaS products, as well as an interest in leveraging AI to enhance privacy operations, is a significant plus. /li /ulh3Languages /h3ulliFull professional proficiency in English, Spanish and Portuguese is required. /li /ulh3Equal Opportunity Employer /h3pWe follow the principle of equal treatment to consider all job applicants and do not discriminate based on their gender, sexual orientation, colour, racial or ethnic origin, religion, disability, etc. as per applicable law. /ph3Our recruitment process /h3olliInitial call (30 min) with a Recruiting Partner /liliInterview with hiring manager (45-60 min) /liliCase study interview + personality and logic assessment feedback /liliA 30' introduction with the Chief Banking Compliance Officer, followed by a soft skills conversation to explore how we can best support your growth at Shine. /li /ol /p #J-18808-Ljbffr

📌 Senior Privacy Counsel & DPO – ILA (Spain & Portugal) (Madrid)
🏢 shine
📍 Madrid

Postulate a este anuncio

Muestra tus habilidades a la empresa, rellenar el formulario y deja un toque personal en la carta, ayudará el reclutador en la elección del candidato.

Suscribete a esta alerta:

Recibe por email las nuevas ofertas de trabajo para: senior privacy counsel & dpo – ila (spain & portugal) (madrid) / madrid

Suscribete a esta alerta:

Recibe por email las nuevas ofertas de trabajo para: senior privacy counsel & dpo – ila (spain & portugal) (madrid) / madrid