DPO & Compliance Officer

Filigran, founded in October 2022, operates in the cyber‑tech ecosystem delivering open‑source solutions that anticipate threats, close security gaps and reinforce organisations' security posture. The company's products are used by more than 6 000 public and private entities worldwide. The role advertised is DPO & Compliance Officer, responsible for designing and rolling out a practical, scalable compliance programme while serving as Filigran's formal Data Protection Officer. On a daily basis the officer will act as the primary contact for supervisory authorities such as the CNIL and for data subjects. They will design and run the privacy programme, handling ROPAs, DPIAs, privacy‑by‑design, data‑subject rights, breach assessment and international transfers. In parallel, they will lead the implementation of compliance controls across AI governance, NIS2, operational resilience, export controls and economic sanctions, maintaining a proportionate framework of policies, risk maps, monitoring plans and internal reporting. Close partnership with Security, Product, Engineering and Sales will be required to embed regulatory requirements into product development, vendor management and customer assurance, while monitoring EU, UK, US and other market regulations and advising the executive team. The position demands a seasoned professional with 7‑10 years of experience as a DPO, data‑privacy lead or compliance officer, preferably within a fast‑growing technology or SaaS environment. Candidates must possess demonstrable expert knowledge of data‑protection law, deep hands‑on command of GDPR and UK GDPR, and a recognised DPO or IAPP certification such as CIPP/E. Experience delivering a company‑wide EU AI Act implementation and ownership of at least two adjacent regulatory programmes (e.g., AI governance, cybersecurity regulation, operational resilience, export controls or sanctions) are essential. The role also requires the ability to translate complex legal obligations into proportionate, business‑enabling controls, to lead unfamiliar workstreams with sound judgement, and to build credibility with technical, commercial and executive stakeholders. Comfort with remote, async‑first work and a strong interest in applying AI tools to privacy and compliance processes are also required. Beyond the core requirements, a background in cybersecurity, threat intelligence or a technical B2B SaaS setting is valued, as is fluency in both English and French. Filigran offers competitive pay plus equity, a fully remote and flexible work model, bi‑annual in‑person gatherings and a culture built on Cohesion, Openness, Responsibility and Equity. The company emphasises inclusion and equal opportunity, inviting candidates who want to contribute to open, resilient security solutions worldwide. What the role asks for: - 7–10 years experience as DPO, data‑privacy lead or compliance officer - Expert knowledge of data‑protection law and practice - Recognised DPO certification or IAPP qualification (e.g., CIPP/E) - Deep hands‑on expertise in GDPR and UK GDPR - Experience implementing the EU AI Act company‑wide - Ownership of at least two regulatory programmes (AI, cybersecurity, etc.) - Ability to translate legal requirements into proportionate operational controls - Nice‑to‑have: cybersecurity or technical B2B SaaS background; fluency in English and French