Head of Group Compliance & Group Data Protection Officer

Lead a global compliance function and help shape how compliance enables the business

Are you an experienced compliance, privacy or GRC leader who enjoys operating at the intersection of regulation, business and technology?

Do you thrive in a role where you can set direction, lead experienced professionals, advise Executive Management and the Board, and turn complex requirements into practical solutions?

Then this could be your opportunity to lead Aeven's Group Compliance function.

 

The role

As Head of Group Compliance & Group Data Protection Officer, you will lead the Global Group Compliance organisation of approximately 27 professionals across four teams and three countries.

You will have overall responsibility for the strategy, direction and development of the function, covering:

• Group Data Protection and the DPO function
• Regulatory Compliance
• Enterprise Risk Management
• Internal Audit
• ISO and external assurance
• Customer and supplier assurance
• Responsibility / ESG

 

You will lead primarily through your managers, creating clear priorities and accountability while empowering highly specialised teams to own their areas.

 

The role combines strategic leadership, independent oversight and senior business advisory. You will work closely with Executive Management and the Board, providing a consolidated view of Aeven's compliance, privacy, risk and assurance position and highlighting where action or decisions are required.

 

At the same time, you will work closely with the business to translate regulatory and customer requirements into clear, proportionate and commercially workable solutions.

 

Your responsibilities

• Set the strategy, priorities and roadmap for Group Compliance and lead, coach and develop the management team.
• Advise Executive Management and the Board on significant compliance, privacy and risk matters and provide clear, decision-oriented Management Information.
• Act as Group DPO and oversee Aeven's data protection framework, including significant privacy risks, breaches, regulatory engagement and international transfers.
• Lead the organisation's approach to regulatory developments, including GDPR, NIS2, DORA-related customer requirements, AI Act, Data Act and digital sovereignty.
• Own the Enterprise Risk Management framework and consolidated enterprise risk view, while ensuring risk ownership remains with the business.
• Oversee Internal Audit and Aeven's broader certification and assurance landscape, including ISO and ISAE activities.
• Provide senior oversight of customer and supplier due diligence, audits and regulatory assurance requirements.
• Support significant incidents, investigations, escalations and remediation across the organisation.
• Continuously develop and modernise the function through simplification, automation, better Management Information and effective use of compliance technology.

 

A key part of the role is ensuring that compliance enables the business rather than unnecessarily slowing it down.

 

Your experience 

We are looking for an experienced leader who is comfortable operating where regulation, risk and business strategy meet.

You bring:

• A relevant Master's degree, for example in Law, Business/Commercial Law or a related field.
• 10+ years of experience within compliance, data protection, GRC or a related area, including several years leading managers and international or multi-disciplinary teams.
• Strong GDPR and data protection expertise, including DPO experience.
• Proven experience advising C-level executives and Boards and communicating complex risks through clear Management Information.
• Experience with Enterprise Risk Management, Internal Audit and assurance.
• Working knowledge of ISO management systems (ISO9001, ISO27001 and ISO14001) and ideally ISAE 3000/3402 reporting.
• Knowledge of EU digital and cyber regulation, including NIS2, DORA, AI Act and Data Act.
• Excellent written and spoken English.

 

Experience from an international, regulated or technology-driven organisation is an advantage, as is experience with privacy certification, GRC technology, customer assurance, ESG or transformation.

 

Who you are

You are a trusted and credible advisor who can challenge senior stakeholders constructively while building strong relationships across the organisation.

You lead through trust, clear direction and empowerment, and enjoy developing managers and creating high-performing teams.

You are strategic but pragmatic, with strong business understanding and the judgement to balance regulatory robustness with commercial realities.

You communicate complex issues simply, drive follow-through and are comfortable raising risks and challenging established ways of working.

Most importantly, you bring integrity, sound judgement, independence and a genuine desire to make compliance work for the business.

 

Why Aeven?

This is an opportunity to take on a broad and influential leadership role at the centre of Aeven's governance and business operations.

You will lead a highly skilled international team, work directly with senior leadership and the Board, and help shape how a technology-driven organisation responds to an increasingly complex regulatory environment.

If you are motivated by leadership, influence, complexity and the opportunity to make compliance a genuine business enabler, we would like to hear from you.