Trust & Compliance Manager – Data Protection & IT Compliance

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Lecturio Weiterbildung & Trainings

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2008

🏥 Healthcare

📚 Education

☁️ SaaS

Healthcare • Education • SaaS

Lecturio Weiterbildung & Trainings is an online medical and nursing education provider that delivers video lectures, question banks, AI-augmented tutoring, and simulation-based training for students and healthcare professionals. The platform offers accredited and non-accredited courses, exam preparation (MCAT, USMLE, NCLEX, etc. ), study tools, and institutional solutions for medical and nursing schools, hospitals, and health organizations. Lecturio combines evidence-based curriculum, educator-led content, and SaaS delivery to support both individual learners and institutions in clinical reasoning and professional training.

📋 Description

• Close collaboration with the Data Protection Officer, CTO and CPO • Operational implementation of data protection and IT compliance processes at the intersection of the GDPR, AI Act and U.S. higher-education requirements such as HECVAT and SOC 2 • Responding to security and privacy questionnaires, including HECVAT, VPAT/WCAG and other security questionnaires • Conducting technical discussions with IT security officers at universities and hospitals • Building and maintaining a centralized Trust & Compliance knowledge base, including a currency/maintenance process • Maintaining records and registers, including RoPA (records of processing activities), subprocessors, certificates, data deletion policy, TOMs (technical and organizational measures) and incidents • Operational handling of data subject requests • Triage of new IT and AI tools from the business units • Building a centralized contract register with standard and bespoke agreements, DPA versions and deviation analyses • Technical updating of DPA appendices • Establishing scalable processes and targeted use of AI and automation tools, for example for document comparison and drafting

🎯 Requirements

• Approx. 3–5 years' experience in IT compliance, GRC, information security, privacy operations or third-party risk, ideally in a SaaS/software environment • Experience responding to enterprise security questionnaires, e.g., HECVAT, VSA and SIG • Solid technical understanding, e.g., encryption, SSO, hosting and backups • Law degree not required • Fluent in German and English, both written and spoken, at least C1 level • Confident and critically minded use of AI tools • Independent and self-driven working style • Structured prioritization • Confident manner in direct interactions with customers and IT stakeholders • Experience with automation tools such as n8n or Zapier or GRC platforms such as Vanta or Drata is a plus

🏖️ Benefits

• Working hours that adapt to your semester, including exam periods when you can scale back • Opportunity to contribute creative ideas and effect change • Free access to the full Lecturio learning platform for personal and professional development • Team and company events • Free drinks and fruit in the office • Free access to coaching sessions and additional mental health benefits • Possibility to extend the collaboration after the initial 12-month fixed-term contract