Senior Data Protection Counsel

Responsibilities

• Data protection management: Maintain and continuously develop the data protection documentation across the PAIR Finance group, in particular the record of processing activities (Art. 30 GDPR), data protection impact assessments (DPIAs) and, in coordination with IT Security, the associated technical and organizational measures, as well as privacy‑relevant information, concepts and agreements with applicants and employees in cooperation with People & Organization (P&O).
• Escalation and advisory point: Act as the technical escalation point for the operational data protection team on complex data protection issues and in handling complex data subject requests (especially under Art. 15 ff. GDPR); contribute to advising management on privacy compliance topics (including IT law matters).
• Support for regulatory and judicial proceedings: Provide substantive support, coordination and assistance in proceedings and inquiries by supervisory authorities and courts, and prepare responses to data protection authorities.
• Contract management: Review, draft and negotiate data protection‑related contracts and provisions with (prospective) clients, service providers and other partners, working closely with our Legal Commercial team, Procurement and IT Security.
• Monitoring & implementation of legal requirements: Support the implementation of data protection requirements arising from the various jurisdictions in which PAIR Finance operates.
• Training and knowledge management: Deliver role‑ and department‑specific trainings (e.g., Privacy by Design) for colleagues.
• Collaboration and quality assurance: Work closely with the Data Protection & AI Governance Counsel, the Data Protection Officer, Quality Management and Customer Advocacy, and, where appropriate, external law firms to review and adjust process quality.
• Participation in audits: Contribute to company audits (e.g., when PAIR Finance is audited) and participate in or lead audits of service providers and partners.

Requirements

• Legal education relevant to the role, ideally demonstrated by relevant focus areas or additional qualifications.
• Full qualification as a lawyer (two state examinations) is a plus; also welcome are candidates with a law degree/state examination or an above‑average degree in business law, as well as graduates with relevant professional experience from other jurisdictions (e.g., Poland, Spain, Italy, France).
• At least two years of relevant practical experience in data protection law in the areas relevant to the role.
• Experience in stakeholder management, e.g., dealing with supervisory authorities, is an advantage.
• In‑depth knowledge of data protection (GDPR, national data protection laws such as the DSG) and IT/software/copyright law as well as data security, ideally with relevance to the payments industry; knowledge of civil law and administrative procedural law is also beneficial.
• Strong interest in legal, technical and commercial interrelationships.
• Ability to explain complex legal and technical issues clearly to other departments.
• Business‑fluent German and English, both written and spoken; additional languages (e.g., French, Italian, Spanish, Swedish) are a plus.
• Motivation to work in an international, regulated and innovative environment and to contribute as part of a great Legal & Compliance team.

Core Competencies

Demonstrates expertise in data protection law, particularly GDPR compliance, and possesses strong skills in contract management and stakeholder engagement. Proficient in delivering training and managing complex data protection issues within a regulated environment.