Group Privacy Lawyer

What is this role about?

As our Group Privacy Lawyer, you will play a key role in shaping how privacy, data protection, and emerging AI regulations are integrated into Bondora's products, operations, and growth initiatives.

Working at the intersection of law, technology, and business, you'll partner closely with Product, Marketing, Data, Security, Engineering, and Leadership teams to provide practical guidance that supports innovation, data-driven growth, and responsible decision-making in an evolving regulatory landscape.

This is a high-impact role with significant ownership and autonomy, where you'll influence company-wide decisions, build scalable governance frameworks, and help shape the next stage of Bondora's growth. We're looking for someone who thrives in a fast-moving environment, enjoys solving complex challenges, and is comfortable making pragmatic decisions while balancing legal risk and business objectives.

Your main responsibilities will be:

• Own and continuously improve Bondora's privacy compliance framework across products and markets.
• Advise the business on GDPR, ePrivacy, AI Act, marketing compliance, and data processing matters.
• Partner with Product, Marketing, Data, Security, and Engineering teams to enable compliant innovation and growth.
• Lead privacy assessments, including legitimate interest assessments, vendor reviews, data transfer assessments, and DPIAs.
• Develop scalable privacy governance processes, controls, and operational frameworks.
• Support regulatory inquiries, data subject requests, privacy incidents, and supervisory authority interactions.
• Contribute to AI governance initiatives and legal assessments of AI-enabled products and automated decision-making.
• Drive privacy awareness and promote a strong compliance culture across the organisation.

While the role can be performed remotely within Europe, we expect approximately 20–25% of working time to be spent onsite at our Tallinn, Estonia headquarters.

What would ensure success in this role?

• Strong hands-on expertise in GDPR and broader EU privacy regulation.
• Experience advising technology, fintech, regulated financial services, SaaS, or other data-driven businesses.
• Ability to independently conduct LIAs, support DPIAs, perform vendor privacy assessments, and analyze cross-border data transfers.
• Strong contract review and negotiation skills related to data processing and technology vendors.
• Experience supporting marketing, analytics, and customer data usage initiatives.
• Strong stakeholder management and communication skills, with the ability to influence and collaborate effectively across the business.
• Strong commercial judgment and the ability to balance legal risk with business objectives while translating complex legal concepts into practical business guidance.
• Experience with AI governance and the EU AI Act, and the ability to operate effectively in fast-paced, high-autonomy environments.

What can you expect at Bondora?

• Contribute to Bondora’s ambitious goal of reaching 1BN in revenue. Your skills and efforts will directly impact our growth trajectory and shape our company's future.
• Our employees deserve the best. We recognize our people with a competitive salary and a generous benefits package (5 weeks of vacation, private healthcare compensation, hobby grant, mental healthcare support, share options and much more!)
• We provide an environment that encourages your personal and professional growth. As we constantly evolve and innovate, you’ll have endless opportunities (and budget) to expand your skills and skyrocket your career.