Sr GRC & Privacy Specialist

We are on the lookout for a Legal Counsel, Privacy to join the Global Delivery Hero Data Protection Team on our journey to always deliver amazing experiences.
Join the team that protects and enables Delivery Hero’s growth. In the global Legal, Governance and Assurance (One LGA) team, you’ll support key initiatives by providing proactive legal guidance that aligns business goals with regulatory standards. Your work will help mitigate risks and ensure we’re positioned for sustainable, long-term success—making you a key contributor to our mission of delivering amazing experiences worldwide.
This role is part of the Global Data Protection Office of Delivery Hero Group, based in Barcelona. The role involves counselling internal stakeholders on privacy compliance, supporting the implementation of privacy programs and ensuring adherence to applicable laws, regulations and industry best practices. We are looking for a true collaborator with a hands-on, proactive approach who can work effectively across teams to drive privacy initiatives forward.
Provide expert, risk-based privacy advice to the business on new products, initiatives, and operational changes.
Support rider privacy matters, in particular compliance with the EU Platform Work Directive's algorithmic management provisions (PWD-A) and Art. 22 GDPR automated decision-making requirements, in order to build compliant practices.
Perform and support data protection impact assessments, ensuring privacy risks in new employment and platform processes are identified and mitigated early.
Partner with internal stakeholders on marketing initiatives, providing expert advice on Delivery Hero’s adtech business and compliance with regulatory requirements across international jurisdictions.
Develop, implement, and maintain global privacy policies, statements, and internal procedures.
Manage and support investigations or fine-related proceedings with data protection authorities, including the development of strategic mitigation plans.
Monitor ongoing developments around AI governance and contribute to the improvement of AI governance frameworks, ensuring responsible use of AI systems and compliance with emerging AI regulations globally.
An educational background in law and proven experience (3+ years) in privacy, with exposure to marketing topics and/or algorithmic management in the context of platform work
Excellent English language skills. German, Spanish, Italian or Polish is a plus
Demonstrated experience in advising tech companies and data-driven businesses, across multiple jurisdictions is a plus
Strong communication and stakeholder management skills, with experience influencing across different cultures and functions
Comfortable at contributing to defining compliance strategies in novel or evolving legal frameworks, where guidance or precedent doesn't yet exist (e.g., algorithmic management, platform work regulation)
Proactive, taking ownership, anticipating challenges, and actively supporting initiatives forward. Owns problems end-to-end, regardless of where they land organizationally
Certified expertise on EU privacy laws (IAPP CIPP/E, CIPM, TÜV DPO, etc.) is a plus

Employment type
Full-time

Work arrangement
No