Data Protection Officer (Privacy & AI)

The role

You will build and maintain the company's data protection and AI compliance program. You will work with engineering, analytics, marketing, and product teams to embed privacy-by-design and ensure compliance with data protection and AI rules.

What you will do

• Building and maintaining privacy policies, internal procedures, the RoPA and an AI system inventory with AI vendor risk assessments
• Running DPIAs and AI risk assessments for current and new products/features
• Handling data subject requests, including chat history in AI features
• Negotiating DPAs with vendors, partners and AI providers
• Owning consent and marketing compliance across web, app, email and SMS
• Owning age assurance and privacy safeguards for AI chat experiences
• Training employees, tracking regulatory change, and liaising with regulators and external counsel

Required qualifications

• 4+ years of legal experience
• 2+ years in a privacy/DPO role (law firm, Big 4 or in-house tech)
• Experience conducting Data Protection Impact Assessments (DPIA)
• Experience building Records of Processing Activities (RoPA)
• Deep knowledge of GDPR and CCPA/CPRA
• Working knowledge of the EU AI Act
• Hands-on experience with consent management: CMPs, Google Consent Mode, IAB TCF
• Fluent English, including drafting legal and compliance documents
• Ability to explain complex rules in plain language and work as a partner to product teams

Nice to have

• CIPP/E, CIPM or equivalent
• Kids and age assurance: COPPA, age-gating, app store age ratings
• Marketing compliance: email/SMS consent, CAN-SPAM, TCPA, ePrivacy, Global Privacy Control
• US/EU privacy litigation risk: pixels, session replay, VPPA, wiretapping claims
• Vendor and transfer work: DPAs (including with LLM providers), SCCs, DPF, TIAs
• AI products: conversational AI and AI companion features, AI-generated content, US state chatbot rules, AI vendor risks

Benefits

• Fast professional growth
• Professional training and learning any language, including Ukrainian
• Work format of your choice
• Equipment and services
• 20 days of vacation
• Public holidays
• Unlimited sick leave
• Sports
• Health insurance in Ukraine (after the probation period)
• Corporate doctor services
• Mental health support

About the company

HOLYWATER TECH is a technology company building entertainment products at the intersection of human creativity and artificial intelligence. Their ecosystem includes My Drama, My Passion, and My Muse.