Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm’s EU Compliance team designs and implements a compliance program that proactively addresses regulatory requirements while also identifying potential compliance issues that may arise. Compliance program activities include advisory, training, testing & monitoring, reporting and oversight. Although a second line of defence, compliance partners with the business to support new products, markets, and initiatives, as well as issue identification, remediation plans and risk assessment. Compliance uses multiple data sources to enable informed decision making, strengthen controls and provide good outcomes for consumers.
As Affirm continues expanding across Europe, we’re seeking an experienced Regulatory Compliance Manager / Data Protection Officer (DPO) to strengthen Affirm B.V.’s governance and compliance frameworks. You’ll be responsible for building and maintaining a robust privacy and regulatory compliance program in line with EU and Dutch requirements, including GDPR. This remote-eligible role reports to the EU Compliance Director and will be registered as DPO with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
What You’ll Do
Own and oversee the design, implementation and maintenance of Affirm’s EU Compliance & Privacy Framework, ensuring adherence to local regulatory requirements (eg. GDPR).
Develop and maintain policies, procedures, and controls ensuring these are proportionate, risk-based, and aligned with Affirm’s global compliance standards.
Serve as Affirm B.V.’s registered Data Protection Officer, acting as the primary contact for the Dutch Data Protection Authority and managing regulatory notifications and reporting.
Advise on compliance and privacy matters across functions including Product, Risk and Engineering, helping balance regulatory obligations with business objectives.
Lead privacy governance, including Data Protection Impact Assessments (DPIAs), record-keeping, and privacy-by-design reviews.
Support the development and execution of Affirm’s Compliance Monitoring Programme (CMP), ensuring alignment with the firm’s risk appetite and market context.
Drive awareness and accountability through training, communication, and proactive engagement across teams.
Monitor regulatory developments and recommend updates to internal frameworks to maintain ongoing compliance readiness.
Other duties as assigned.
What We Look For