Data Protection & Compliance Specialist

Job description

XUND is a leading digital health scale-up that enables healthcare companies to digitize patient interactions and translate data into actionable insights. It's our vision to empower patients to make better decisions. But we cannot do it alone: we need leaders, doers, and innovative minds to turn our vision into reality. That is why we are looking for an ambitious, highly committed, and entrepreneurial team player who shares our **values of putting patients first, building an inspiring and open environment and challenging the status quo.** **The Role** Join us as a Data Protection & Compliance Specialist to level up our GDPR compliance system and support our information security management system. Bringing in a collaborative approach, you will help us define a harmonized and actionable set of personal data handling processes for our various medical use cases. We set ourselves a high quality and security standard, and by providing clarity, you will become the go-to person for identifying responsible data and security practices. **Your Responsibilities** - Maintain user facing and internal privacy documentation, including the privacy policy, records of processing activities, data protection impact assessments, and balancing tests. - Collaborate on our information security management system (ISO27001, C5, Cyber Resilience Act) and conduct internal audits. - Conduct third-party risk assessments and security reviews of third-party agreements. - Promote a culture of compliance and risk awareness throughout the organization. - Tackle privacy related user concerns, and join product and development teams in building privacy-by-design into our products, championing privacy initiatives from conception through delivery. - Coordinate external audit efforts, be the primary point of contact between the audit firm and XUND. **Your Profile** - Solid understanding of EU data protection law, the cloud business model, and related cybersecurity concepts. - Hands-on experience with GDPR documentation, security compliance frameworks, and data processing agreements. - Strong analytical and collaboration skills to translate requirements into XUND’s ways of working. - B2+ German (required efficiently collaborate on privacy and security documentation). - Experience working with software development, IT infrastructure, and agile teams. - Resident in the European Union with a valid work permit. **Nice to have** - Lead auditor (preferably for ISO27001) or similar certification, strong knowledge of ISO-based quality management systems. - Education or work experience in contracting law related to data protection. - Experience in a scale-up or fast-paced environment. - Fluency in spoken German. **Your Benefits** - Join one of Europe's leading healthtech scale-ups and make a real impact in a purpose-driven environment. - Take on exciting challenges while working in a dynamic space where creativity and fresh ideas are always encouraged. - Benefit from a dedicated training budget and professional development time, because we believe in growing together and supporting your skill-building journey. - Work where you are most productive – remotely from home or from one of our offices in Vienna, Budapest, and Berlin. - Connect with your team through company-wide celebrations and optional local gatherings, always packed with great food and zero pressure. - Be part of a vibrant, open culture with flat hierarchies and direct communication, where your voice matters and everyone’s ideas are heard. - Plus, office dogs! Bring your four-legged friend to work or hang out with the resident dogs to break up the day. **Salary & Compensation** *Our salary ranges are determined by role, level, and location. The minimum starting salary for this position is:* - *Budapest: 1,100,000 HUF gross / month* - *Vienna: 3,954 EUR gross / month (pursuant to the [**IT collective agreement**](https://www.wko.at/oe/information-consulting/unternehmensberatung-buchhaltung-informationstechnologie/it-dienstleistung/it-kollektivvertrag#heading_abschluss_it_kv_2024_und_2025))* *Willingness to overpay is given and depends on the respective qualification and experience. On top of that, we also let all our employees participate in our Virtual Stock Option Plans (VSOPs), ensuring that they can directly benefit from our collective success.* **At XUND, we know that innovation happens when different perspectives come together. Whether you’re a coding whiz, a health enthusiast, a spreadsheet guru, or a creative problem-solver, we value what you bring to the team. If you’re excited about this role but feel like you don’t “check all the boxes,” don’t worry – we still want to hear from you! We’re committed to fostering an inclusive space where everyone’s contributions are valued and respected, and we encourage candidates of all backgrounds, identities, and experiences to apply. If you’re eager to make an impact, we’d love to hear from you!**