Head of Data Protection and Compliance

About this role

Responsibilities

• Ensure compliance with data protection laws (B2C focus) and corporate compliance regulations.
• Architect and implement the comprehensive data protection and compliance setup required following the acquisition by the American company.
• Monitor, enhance, and develop the Compliance Management System (CMS) to effectively mitigate risks.
• Stay ahead of regulatory changes (e.g., GDPR, CSRD, AI Act, DSA, autonomous driving) and assess their business impact.
• Advise senior leadership on compliance risks, providing practical and strategic solutions.
• Develop and implement policies, internal controls, and best practices across multiple European markets and the US.
• Lead and oversee audits, risk assessments, and investigations related to compliance and data protection.
• Act as the primary point of contact for data protection and regulatory authorities.
• Design and deliver training programs to educate employees on compliance and ethical business conduct.
• Report on data protection and compliance issues and recommend changes.
• Collaborate cross-functionally with tech, product, people, and information security teams to integrate compliance into business operations.
• Lead and mentor the compliance and data protection team, fostering a culture of accountability and ethical decision-making.
• 8+ years of experience in compliance and data protection leadership, ideally in a tech-driven or regulated environment.
• Deep knowledge of European compliance frameworks, including GDPR, CSRD, AI Act.
• Proven experience in overseeing compliance and data protection across multiple markets.
• Experience with US compliance and privacy aspects is a plus.

Requirements

• Strong investigative and analytical skills, with the ability to assess risks and provide actionable insights.
• Exceptional communication and stakeholder management skills, with the ability to influence decision making.
• Hands-on approach, comfortable navigating ambiguity and implementing compliance strategies in an extremely fast-paced environment.
• Ability to multi-task, work independently, and collaborate effectively in a team.
• Ability to work with exceptional speed, managing high-pressure situations and tight deadlines while maintaining total accuracy.
• Professional certification (e.g., CCEP, CIPP/E, CIPM, AIGP or similar) is a plus.
• Fluency in English and German is required; an additional European language is a strong advantage.
• Flexible working arrangements
• LinkedIn Learning
• Sabbatical & special leave policies
• WeRoad partnership
• Birthday, 24th + 31st December off
• Short term EU work policy
• Mobility Credit
• Employee assistance program

About FREENOW

Freenow by Lyft empowers smarter mobility decisions, helping people to move freely and cities to thrive. Through our multi-mobility app, we feature broad options for everyone across 9 European markets and over 180 cities. Millions of passengers can access services including taxis, private hire vehicles, carsharing, car rental, e-scooters, e-bikes, e-mopeds, and public transport within a single app. In July 2025 Freenow was acquired by Lyft, a global mobility platform, which connects riders and drivers for billions of rides across North America and Europe. Together, Freenow and Lyft are creating a more caring and connected world, with transportation for everyone. We are a global, diverse, highly motivated, and collaborative team that strives for excellence and likes to have fun. Ready for your next ride?