Data Privacy Counsel at Aylo in Thessaloniki, Greece, GR

Established in 2004, we are a tech pioneer offering world-class adult entertainment and games on some of the internet’s safest and most popular platforms. With the support of an international team of dynamic and collaborative innovators, we are on a mission to enable safe user experiences and empower our communities by celebrating diversity, inclusion, and expression — all while maintaining robust trust-and-safety protocols.

We embrace the best of both worlds! Local talent can thrive in our collaborative office space with the flexibility of a hybrid work environment, while remote team members play an integral role in shaping our dynamic culture from afar. We have offices in Montreal (Quebec), Austin (Texas) and Nicosia (Cyprus).

*A select number of positions require full-time in office attendance*

This position reports to the Data Privacy Director. The successful candidate will support the Data Privacy team on a wide range of assigned and special projects, such as the execution of routine privacy audits, data-infrastructure risk management, security controls, policies, and research reports. The candidate will facilitate development, implementation, and monitoring of compliance with policies, international standard practices, and privacy regulatory frameworks around the world. 

What you'll be doing:

• Conduct research and analysis on data privacy regulations and industry frameworks, and compile relevant documentation to support data protection obligations across multiple countries.
• Research and prepare guidance of the business impact of proposed changes in data privacy laws and practice.
• Develop, implement, and maintain global privacy and data protection policies, notices, controls, and internal procedures.
• Advise internal stakeholders on their obligations under applicable privacy laws, facilitating informed decision-making and the achievement of business objectives.
• Draft and review data processing agreements (DPAs).
• Perform DPIAs, LIAs, and other compliance monitoring and risk assessment activities, as required.
• Maintain and review records of processing activities (RoPA).
• Collaborate with information security, product, procurement, and other functions to enhance the privacy program and assess risks related to technology systems and innovations.
• Conduct compliance audits and report on identified risks.
• Analyze and report on the effectiveness of privacy by design and default strategies, data governance, and data risk management.
• Support the development and implementation of systems and processes for privacy and data protection compliance.
• Handle data subject requests.

What you'll need to be successful:
Must-haves:

• Proven experience (2+ years) in data protection, privacy, or related areas .
• Educational background in Law or a related field (e.g., Law, Information Security, Computer Science).
• Knowledge of European data protection laws and practices, including an in-depth understanding of GDPR and emerging privacy regulations.
• Knowledge of Canadian and U.S. privacy regulations, as well as global standards and frameworks.
• Understanding of technical concepts (e.g., web applications, cloud computing).
• Experience with privacy or security audits is considered an advantage.
• Solid understanding of information security principles and methodologies.
• Professional certifications in privacy (e.g., CIPP, CIPT), risk management, or audit are a plus.
• Experience advising online technology companies and data-driven businesses across multiple jurisdictions is an advantage.
• Inquisitive, self-starter with the ability to work both independently and as part of a team.
• Strong critical thinking and problem-solving skills.

As an equal opportunity employer, we celebrate diversity and are committed to creating an inclusive environment for all employees 

 In this role you may be exposed to adult content