(Senior) Privacy Manager - Governance & Legal (all genders)

Support us in designing the insurance experience of the future. As our (Senior) Privacy Manager (all genders), you will further shape and build getolo's privacy organisation enabling us to further scale and expand our European business. You will take ownership of developing our privacy framework, from governance structure, processes and controls to tools and documentation, and bring it to life across the company. You will report to our Head of Governance & Legal, who will be your sparring partner and support you in implementing the relevant structures. This is a full-time hybrid role, with 1–2 days per week in our Berlin office. Requirements Your Mission Strengthening our privacy organisation Taking getolo's privacy organization to the next level: furthering governance model, roles and responsibilities, policies, processes and controls Define clear accountabilities between business teams, privacy and control functions (3 lines of defense), and establish the corresponding reporting and escalation lines Reinforce a sustainable records of processing and data inventory that will keep pace with our products and data landscape going forward Furthering privacy monitoring and controls, including KPIs and regular management reporting Strengthening privacy awareness across the company through training and practical guidance Privacy by design & technology Embed privacy by design and by default into our product and software development lifecycle Work with data and engineering teams on data architecture, retention and deletion concepts Drive the implementation and automation of processes and privacy tools, e.g. DSR workflows and data mapping solutions Day-to-day privacy advisory Act as the first point of contact for data protection issues across business projects, ensuring compliance with the GDPR, BDSG, TDDDG and related regulations Conduct and guide data protection impact assessments and risk assessments with our DPO at Zurich, and drive the mitigation of identified risks Prepare, review and negotiate data processing agreements, international transfer mechanisms and privacy clauses Oversee the handling of data subject requests and personal data breaches, including notification processes Ensure the compliant processing of special categories of personal data, in particular health data Assess AI use cases from a privacy perspective and support our AI inventory and AI risk assessments Continuous Exchange with our DPO and her Privacy Team at Zurich Governance & legal support Prepare, review, and coordinate commercial contracts within established templates / frameworks, involving Group Legal where required Contribute to the maintenance and accuracy of legal templates, registers, and internal guidance materials Monitor and give advice on legislative and regulatory developments in data protection and digital regulation Project Management Apply structured project management methodologies to deliver governance & legal initiatives efficiently Scope, plan, and execute cross-functional projects, ensuring stakeholder alignment and measurable outcomes Champion process optimisation and continuous improvement in operational workflows, drawing on best practices from modern legal operations and project delivery models What you will need to succeed At least 5 years of professional experience in data protection, ideally in-house in a regulated, fast-paced or international environment Proven experience in building or substantially developing a privacy organisation, not only operating an existing one The ability to translate legal requirements into processes, controls and clear responsibilities, and familiarity with common governance and control models Technical affinity and an understanding of software development, data flows, cloud environments and automation Ideally a legal background, such as the First and Second State Examination or a degree as Wirtschaftsjurist (LL.B./LL.M.); we also welcome candidates with a