Data Protection & GRC Specialist (DPO)

About the role

Bolt Insight is strengthening its data protection and GRC function as its customer base and data volumes grow. You will act as the Data Protection Officer and own privacy and customer-facing compliance end to end, working closely with engineering to help win and keep enterprise customers.

Key responsibilities

• Act as the designated DPO under GDPR, the point of contact for supervisory authorities and data subjects
• Maintain records of processing activities (RoPA), DPIAs, retention schedules and privacy notices
• Handle data subject requests and support personal data breach assessment and notification
• Manage the subprocessor list and international data transfer documentation
• Bring a privacy-by-design view to product and engineering decisions, especially for AI-moderated research products
• Review DPAs and data protection clauses in customer and vendor contracts, and join customer calls to answer privacy and security questions
• Build and maintain a security questionnaire answer library in Vanta, keep the Trust Center up to date and use automation to cut response times
• Support annual ISO 27001 and SOC 2 audits with the IT Manager, and maintain policies, the risk register and vendor risk assessments
• Keep the company compliant as regulations evolve, focusing on GDPR, the EU AI Act and US privacy laws

Required profile

• 2+ years of experience in data protection, privacy or GRC
• Solid working knowledge of GDPR
• Hands-on exposure to ISO 27001 and/or SOC 2
• Comfortable talking with engineers about how data is stored, accessed and secured
• Fluent English, written and spoken

Nice to have

• Familiarity with the EU AI Act and US privacy laws (e.g. CCPA/CPRA)
• A privacy certification such as CIPP/E, or an ISO 27001 certification
• Experience with Vanta or a similar GRC platform
• Experience in a SaaS or tech company

What we offer

• Remote working with flexible, nomadic working
• Private medical insurance
• Virtual or local team gatherings
• In-house recognition awards