Data Protection & GRC Specialist

About the role

As our customer base and data volumes grow, we’re strengthening our data protection and GRC function. You’ll act as our Data Protection Officer and own privacy and customer-facing compliance end to end, working closely with engineering and helping us win and keep enterprise customers.

What you’ll do

Data protection (DPO)

• Act as our designated DPO under GDPR and be the point of contact for supervisory authorities and data subjects

• Maintain our records of processing activities (RoPA), DPIAs, retention schedules and privacy notices

• Handle data subject requests and support personal data breach assessment and notification

• Manage our subprocessor list and international data transfer documentation

• Bring a privacy-by-design view to product and engineering decisions, especially for our AI-moderated research products

Customers and contracts

• Review DPAs and the data protection clauses in customer and vendor contracts

• Join customer calls as our DPO to answer privacy and security questions

• Own security and privacy questionnaires end to end: build and maintain a security questionnaire answer library in Vanta, keep our Trust Center up to date, and use automation to cut response times

• Bring in IT and DevOps only for non-standard technical questions

GRC and compliance

• Support our annual ISO 27001 and SOC 2 audits together with our IT Manager, and help maintain policies, the risk register and vendor risk assessments

• Keep us compliant as regulations evolve, with a focus on GDPR, the EU AI Act and US privacy laws

What you’ll bring

Must-have

• 2+ years of experience in data protection, privacy or GRC

• Solid working knowledge of GDPR

• Hands-on exposure to ISO 27001 and/or SOC 2

• Comfortable talking with engineers about how data is stored, accessed and secured

• Fluent English, written and spoken

Nice-to-have

• Familiarity with the EU AI Act and US privacy laws (e.g., CCPA/CPRA), or a strong interest in learning them

• A privacy certification such as CIPP/E, or an ISO 27001 certification

• Experience with Vanta or a similar GRC platform

• Experience in a SaaS or tech company

How you’ll work

• Work closely with our CTO, IT Manager and DevOps Manager, and with Sales on enterprise deals

• In your DPO capacity, operate independently with direct access to senior leadership, as GDPR requires

Your first 90 days

• Get to know our products, data flows and customers, and step into the DPO role

• Review and update the RoPA, DPIAs and subprocessor list

• Build a security questionnaire answer library in Vanta, based on our policies, audit evidence and past responses

• Support the next ISO 27001 / SOC 2 audit cycle together with IT

Why Work for Bolt Insight?

At Bolt Insight, we’re a vibrant and growing start-up mentality business with a passionate team that thrives on innovation and collaboration. Here’s what you can expect when you join us:

• Remote working and the flexibility to work in a nomadic way – Enjoy the best of both worlds, balancing work and life your way.

• Flexible working environment – We trust you to manage your time and work in a way that suits you best.

• Private Medical Insurance - Your health and well-being are important to us, and we’ve got you covered.

• Virtual or local team gatherings – Whether online or in person, we love to connect and celebrate our successes together.

• In-house recognition awards – We celebrate our ‘lightning bolts’ (those who go above and beyond) and show our appreciation for hard work!

At Bolt, curiosity, creativity and passion matter most. If you’re excited about shaping the future of research and contributing to a culture built on innovation and collaboration, we’d love to hear from you.

Bolt Insight is an equal opportunities employer committed to creating and maintaining an inclusive, diverse and professional workplace for all. We strive to create a welcoming environment where all individuals, no matter their background or identity, feel valued and supported.

If you have specific requirements throughout the recruitment process, please reach out to a member of our HR team who will make the appropriate adjustments.

Apply today and join a dynamic, international team driving innovation across borders!