Compliance Generalist

Overview At Nortal, we believe complexity doesn't have to mean complicated. That mindset shapes the way we approach compliance, too. As technology evolves and regulation grows more complex, the challenge isn't just understanding the rules—it's turning them into practical ways of working that help the business move forward That's what makes this opportunity different. Rather than focusing on a single area, you'll work across AI governance, data protection, regulatory change, and emerging legislation. This means no two challenges are quite the same. If you enjoy connecting the dots, solving complex problems, and learning something new every week, keep reading. What you’ll do Maintain the AI governance operating model for the Nortal Group, including the structures, processes, and accountability frameworks for managing AI-related risks and compliance. Lead the interpretation and implementation of AI regulations, particularly the EU AI Act, translating requirements into internal guidance and governance standards. Drive collaboration across legal, compliance, information security, product, and business teams to embed AI governance principles into day-to-day operations. Provide GDPR support, including evaluating software approval requests, managing data breach and notification processes, handling data subject rights, and maintaining GDPR registers. Lead the regulatory monitoring function, tracking legislative developments and emerging compliance obligations. Support the compliance risk programme, including policy management, due diligence, internal audits, investigations (including whistleblowing cases), and conflict of interest processes. Deliver and coordinate AI and compliance training across the organisation. What makes you a great fit At least 5 years of experience in a compliance, legal, or governance role, including work across international jurisdictions, ideally within a technology or professional services environment. Law degree (LLB, LLM, or equivalent), or a degree in a closely related field. Demonstrable knowledge of AI regulation (particularly the EU AI Act), GDPR and data protection principles, with hands-on experience in privacy operations and policy drafting. Strong regulatory interpretation skills, with the ability to translate complex regulatory frameworks into clear, practical guidance for the business. Excellent stakeholder management to collaborate across functions, including with legal, information security, HR, and business teams. Strong project management skills to drive global regulatory monitoring and risk management. Fluency in English, additional European languages are a plus. Why join Nortal? We hire people not only for their skills but also for cultural add. We live by our values: commit to delivering value and results, take ownership, empower yourself and others, and own your future and growth. Besides our professionalism, we like to spice things up with good humor. We care about your growth & development. In Nortal we support constant improvement and knowledge sharing via Learning Hives, external and internal training, dedicated time for self-learning, a mentorship program, and strong 1:1 culture. We prioritize your health & well-being by providing a flexible package for health insurance and sports initiatives.We support your work-life balance and provide flexible working hours. It's your choice whether you want to work from the office or remotely. With our Work From Anywhere program, you have the freedom to work where you work best. We have also launched the Nortal Nomad program for people wanting to move short-term to some other country. Salary range 3500-4500€ gross/monthly (full-time). Final compensation will depend on factors such as relevant experience, role seniority, and skill set. About Nortal For over 25 years, we’ve been shaping digital transformation, delivering complex solutions for global enterprises and public sector organisations. Today, we are at the forefront of an AI-driven transformation era, helping organizations turn data into real business value. By combining deep domain expertise with data and AI, we design solutions that create immediate impact while scaling for the future. We believe complexity doesn’t have to mean complicated, and that the best solutions are those that work in the real world, not just on paper. That’s why our clients trust us with their most ambitious, business-critical initiatives.