The Role

Join us as a Data Protection & Compliance Specialist to level up our GDPR compliance system and support our information security management system. Bringing in a collaborative approach, you will help us define a harmonized and actionable set of personal data handling processes for our various medical use cases. We set ourselves a high quality and security standard, and by providing clarity, you will become the go-to person for identifying responsible data and security practices.

Your Responsibilities

• Maintain user facing and internal privacy documentation, including the privacy policy, records of processing activities, data protection impact assessments, and balancing tests.

• Collaborate on our information security management system (ISO27001, C5, Cyber Resilience Act) and conduct internal audits.

• Conduct third-party risk assessments and security reviews of third-party agreements.

• Promote a culture of compliance and risk awareness throughout the organization.

• Tackle privacy related user concerns, and join product and development teams in building privacy-by-design into our products, championing privacy initiatives from conception through delivery.

• Coordinate external audit efforts, be the primary point of contact between the audit firm and XUND.

Your Profile

• Solid understanding of EU data protection law, the cloud business model, and related cybersecurity concepts.

• Hands-on experience with GDPR documentation, security compliance frameworks, and data processing agreements.

• Strong analytical and collaboration skills to translate requirements into XUND’s ways of working.

• B2+ German (required efficiently collaborate on privacy and security documentation). 

• Experience working with software development, IT infrastructure, and agile teams.

• Resident in the European Union with a valid work permit. 

Nice to have

• Lead auditor (preferably for ISO27001) or similar certification, strong knowledge of ISO-based quality management systems.

• Education or work experience in contracting law related to data protection.

• Experience in a scale-up or fast-paced environment.

• Fluency in spoken German. 

Your Benefits

• Join one of Europe's leading healthtech scale-ups and make a real impact in a purpose-driven environment.

• Take on exciting challenges while working in a dynamic space where creativity and fresh ideas are always encouraged.

• Benefit from a dedicated training budget and professional development time, because we believe in growing together and supporting your skill-building journey.

• Work where you are most productive – remotely from home or from one of our offices in Vienna, Budapest, and Berlin.

• Connect with your team through company-wide celebrations and optional local gatherings, always packed with great food and zero pressure.

• Be part of a vibrant, open culture with flat hierarchies and direct communication, where your voice matters and everyone’s ideas are heard.

• Plus, office dogs! Bring your four-legged friend to work or hang out with the resident dogs to break up the day.

Salary & Compensation

Our salary ranges are determined by role, level, and location. The minimum starting salary for this position is:

• Budapest: 1,100,000 HUF gross / month 
• Vienna:  3,954 EUR gross / month (pursuant to the IT collective agreement)

Willingness to overpay is given and depends on the respective qualification and experience. On top of that, we also let all our employees participate in our Virtual Stock Option Plans (VSOPs), ensuring that they can directly benefit from our collective success.