Why this role exists
Peak Atlas works with contact and customer data of small and mid-sized businesses, runs its own software platform, Peak One, and uses AI tools every day. That requires clear rules: which data we process for what purpose, how we answer requests and how new tools are introduced properly. This role makes sure trust does not depend on chance.
Your outcomes
- A current, traceable record of processing activities.
- A reliable process for data subject requests and data protection incidents.
- Reviewed data processing agreements and a clear check for new service providers and AI tools.
- Understandable policies and training that teams actually apply.
Your day and scope
Recording and assessing processing activities, shaping privacy notices and consents, reviewing providers and tools, answering questions from Sales, Marketing, Product and People, writing policies and giving training. You work closely with Legal, Revenue Operations and product development and coordinate with external advisers where needed.
Boundaries: You own building and developing privacy and compliance management. Whether you also take on the formal role of data protection officer is something we decide together; business decisions stay with the accountable owners.
Your first 90 days
First 30 days
Map data flows, tools in use and existing documentation; prioritise the most important gaps by risk.
By day 60
Build the record of processing activities and the process for data subject requests; introduce a simple check for new tools.
By day 90
Have published and trained the first policies and run a regular review rhythm with the teams.
What you bring
- Sound knowledge of the GDPR and its practical application in companies.
- Experience with documentation, vendor reviews or data processing agreements.
- Basic technical understanding of software, data flows and cloud services.
- Ability to explain rules clearly rather than just demand them.
What you can learn with us
- Our systems and data flows in detail.
- Regulatory requirements for AI tools in depth.
- Specific compliance topics beyond privacy.
When this role is less of a fit
You mainly want to act as a control function without looking for workable solutions with teams, or you prefer a role where all processes are already in place.
Compensation and conditions
We only commit to compensation, contract type, working hours and location once they are approved. We will tell you all of it concretely in the first call, before you invest time in further steps.
Your application process
Short application
Name, email and your answer to the role's entry question. CV optional.
First call
A personal conversation about the role, conditions and your questions. We cover compensation and location concretely here.
Work sample
An announced, time-bounded task with a fictional tool and synthetic data flows: a short privacy assessment and a clear recommendation to the team. No real data, no unpaid work. People assess risk judgement, clarity and practicality.
Decision
A person decides, never an AI. You always get a response.
Your entry question
„A team wants to start using a new AI tool at short notice to summarise customer calls. Which three questions do you clarify first?“
Apply now