Viva.com is the first Tech Bank in Europe for businesses, serving 31 countries through its pan-European critical infrastructure for payments & banking services.
Viva.com’s offering spans omnichannel payment acceptance, deposit accounts, card issuing, and a broad suite of financing solutions, providing businesses of all sizes and sectors with the tools they need to operate efficiently, both domestically and internationally, through a single integrated platform.
Viva.com pioneered and leads in Tap on Any Device technology, enabling acceptance on any Android device or iPhone, while connecting directly to all major international and domestic card schemes, local payment systems, and alternative payment methods across Europe.
The Role
We are seeking an experienced Data Protection Officer to lead and continuously strengthen our data protection framework across our banking, payments and technology operations.
Acting independently and with direct access to senior management and the relevant governing bodies, you will oversee compliance with the GDPR and applicable privacy legislation, advise the organisation on complex data protection matters and serve as the primary point of contact for supervisory authorities and data subjects.
This is a senior, hands-on role requiring strong legal and regulatory expertise, sound business judgement and a deep understanding of how personal data is used across digital products, financial services, AI-enabled solutions and large-scale technology environments.
Key Responsibilities
Act as the organisation’s appointed Data Protection Officer in accordance with Articles 37–39 of the GDPR, performing the role independently and without conflict of interest.
Monitor compliance with the GDPR, applicable national and European privacy legislation, internal policies and regulatory expectations across the organisation.
Advise senior management, business functions and governing bodies on complex data protection matters, emerging risks and required remediation actions.
Serve as the primary point of contact for Data Protection Authorities, managing regulatory enquiries, inspections, consultations and notifications.
Oversee the Data Protection Impact Assessment (DPIA) framework and advise on high-risk processing activities, new products, technologies and strategic initiatives.
Provide privacy guidance on AI systems, profiling, automated decision-making, analytics, fraud prevention, biometric data and other emerging technologies.
Embed privacy by design and by default throughout product development, system implementation, process redesign and third-party integrations.
Oversee the management of personal data breaches, ensuring appropriate assessment, documentation, escalation and regulatory notification.
Monitor the handling of data subject requests and ensure they are completed accurately and within applicable regulatory deadlines.
Review and advise on records of processing activities, privacy notices, retention frameworks, consent mechanisms and lawful bases for processing.
Assess data protection provisions in agreements with customers, suppliers, processors and strategic partners, including international data transfers.
Provide oversight and challenge regarding third-party privacy risk assessments and data processing arrangements.
Design and maintain data protection policies, governance frameworks, controls, reporting mechanisms and annual compliance plans.
Deliver targeted training and awareness initiatives to strengthen accountability and privacy awareness across the organisation.
Produce regular reports for senior management and relevant committees on privacy risks, incidents, compliance performance and remediation progress.
Work closely with Legal, Compliance, Risk, Information Security, Technology, Product and Internal Audit while maintaining the independence of the DPO function.
Leverage AI-enabled and automated tools to improve compliance monitoring, risk identification, reporting and operational efficiency.
At…