Founded by serial entrepreneurs Rico Andersen and Martin Hegelund, Shine is a leading European fintech unicorn on a mission to restore the joy of running a business, by ending wasted time on financial admin. Shine offers a connected solution for invoicing, accounting, payroll, business accounts, payments, and financing, meaning business owners can focus their energy on growing a healthy business, not held back by manual admin. Today we're part of Cegid, a European leader in cloud software for finance and accounting.
We're a multicultural team working from France, Germany, Denmark and the Netherlands, contributing to a wider European network that spans Spain, Portugal and Belgium. The Banking & Compliance team at Shine Over the next year, we will build a best-in-class banking & compliance unit from the ground up, automating reporting cycles, eliminating noise, and freeing our team to do what matters most: generating the sharp, forward-looking insights that drive growth. The Legal & Privacy function sits within Shine's Banking & Compliance division, operating across our European entities; We are a lean, senior team navigating real regulatory complexity: post-merger integration, AI governance, and rapidly evolving data protection landscapes.
Privacy here is not a box-ticking exercise, it is a core part of how we scale responsibly across borders, and we expect the same standard from everyone who joins us.
Your role as a Senior Privacy Counsel &
• DPO – ILA (Spain &
• Portugal) As we scale rapidly across Europe, we are looking for a Senior Privacy Counsel &
• DPO – ILA (Spain &
• Portugal) to join our legal and privacy function. You will be the officially designated Data Protection Officer for all Spanish and Portuguese entities, declared to the relevant supervisory authorities (AEPD in Spain and CNPD in Portugal), while also serving as a hands-on senior privacy expert across day-to-day operations and group-wide projects.
In addition to that, you will bring only deep legal expertise, but a genuine drive to implement privacy management tools, design scalable processes, and identify where automation and AI can replace manual effort entirely. Act as the officially designated DPO for our Spanish and Portuguese subsidiaries before their respective supervisory authorities (AEPD and CNPD) Take full ownership of daily privacy operations: lead Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and manage internal privacy workflows and requests. Draft, review, and negotiate Data Processing Agreements (DPAs) and privacy clauses with clients, vendors, and strategic partners. Own and continuously optimise the Spanish, Portuguese, and ILA regional Records of Processing Activities (ROPAs), ensuring accuracy, scalability, and audit readiness. Investigate and manage data breaches, security incidents, and complex Data Subject Requests (DSRs). Act as a key advisor on AI-related privacy risks and opportunities, ensuring compliant and responsible use of data in AI systems. Provide pragmatic, business-oriented legal guidance to Marketing and Sales (e.g., cookie compliance, outreach regulations, consent frameworks). Minimum of 4 years of hands-on experience in a privacy role, preferably within a fast-paced B2B tech company, Banking, SaaS environment, or a top-tier law firm.
Legal Background: ~ Strong, practical knowledge of Spanish (LOPDGDD), Portuguese (Lei n.o 58/2019), and European (GDPR) data protection laws. A law degree from a European jurisdiction (Spanish or Portuguese legal qualification highly preferred). Ability to translate complex legal requirements into actionable, business-friendly solutions.
Full professional proficiency in English, Spanish and Portuguese is required. as per applicable law. A 30' introduction with the Chief Banking & Compliance Officer, followed by a soft skills conversation to explore how we can best support your growth at Shine. #
📌 Senior Privacy Counsel & Dpo - Ila (Spain & Portugal) (León)
🏢 shine
📍 León