Data Protection Specialist

Chino.io is a company specialising in data protection and cybersecurity, with extensive experience in the digital health and medtech sectors.

Since 2015, we have supported startups and innovative companies across Europe and beyond in addressing data protection, cybersecurity and regulatory compliance challenges.

We combine legal, technical and software development expertise to help our clients build innovative, secure and compliant products and services.

We are an international team, primarily based in Italy and Berlin, working in a dynamic and collaborative environment. We embrace technology, AI and innovative tools to continuously improve how we work and the services we deliver.

We are looking for a Data Protection Specialist to join our consultancy team.

The ideal candidate has professional experience in data protection, is curious, detail-oriented and interested in the intersection of privacy, technology and innovation.

You will work closely with legal consultants, technical specialists and Project Managers, supporting Italian and international clients with regulatory and operational challenges related to data protection and cybersecurity.

• Provide advice and support to clients on data protection and regulatory compliance, primarily GDPR.
• Draft and update legal and compliance documentation, including policies, privacy notices, agreements and procedures.
• Support clients in understanding and addressing regulatory requirements, including those related to the AI Act, NIS2, HIPAA and standards such as ISO 27001.
• Participate in calls, meetings and presentations with existing and prospective clients.
• Work closely with Project Managers, legal consultants and technical specialists to deliver consultancy projects.
• Contribute to assessing the legal and data protection aspects of applications and technology solutions.
• Help develop guidelines, articles, educational materials and specialist content.
• Participate in team meetings, training activities and relevant industry events.

• Professional experience in data protection, privacy, compliance or legal consultancy.
• Good knowledge of GDPR and its main requirements.
• Interest in digital technologies and familiarity with web applications, mobile applications and cloud solutions.
• Ability to analyse regulatory challenges and propose practical, actionable solutions.
• Good legal drafting skills, including policies, documentation and guidelines.
• Strong attention to detail and organisational skills.
• Ability to work independently and collaborate with professionals from different backgrounds.
• Professionalism and discretion when handling confidential or sensitive information.
• Excellent written and spoken English, essential for working with international clients.
• Curiosity and willingness to develop knowledge of technical and cybersecurity topics.

Nice to have:

• Knowledge of the AI Act, NIS2, HIPAA and/or ISO 27001.
• Experience evaluating applications or technology solutions from a data protection perspective.
• Knowledge of German.

• Fully remote work, with the option to use our office in Rovereto, Italy.
• An international, flexible and collaborative working environment.
• Opportunities for professional development alongside experienced legal and technical specialists.
• A dedicated budget for training and personal development.
• The opportunity to work on innovative projects with international clients.
• A laptop and other equipment to support your daily work.
• Opportunities to attend industry events and regular company gatherings, including some mandatory in-person events.

If you're passionate about data protection, technology and innovation, we'd love to hear from you.

📍 Location: Fully remote

🕒 Employment: Full-time

📅 Application deadline: 20 November 2026