Data Protection & GRC Specialist
Confirmed on the employer's own hiring board on Nov 11, 2026. First seen by Alion on Nov 10, 2026.
About the role
As our customer base and data volumes grow, we’re strengthening our data protection and GRC function. You’ll act as our Data Protection Officer and own privacy and customer-facing compliance end to end, working closely with engineering and helping us win and keep enterprise customers.
What you’ll do
Data protection (DPO)
Act as our designated DPO under GDPR and be the point of contact for supervisory authorities and data subjects
Maintain our records of processing activities (RoPA), DPIAs, retention schedules and privacy notices
Handle data subject requests and support personal data breach assessment and notification
Manage our subprocessor list and international data transfer documentation
Bring a privacy-by-design view to product and engineering decisions, especially for our AI-moderated research products
Customers and contracts
Review DPAs and the data protection clauses in customer and vendor contracts
Join customer calls as our DPO to answer privacy and security questions
Own security and privacy questionnaires end to end: build and maintain a security questionnaire answer library in Vanta, keep our Trust Center up to date, and use automation to cut response times
Bring in IT and DevOps only for non-standard technical questions
GRC and compliance
Support our annual ISO 27001 and SOC 2 audits together with our IT Manager, and help maintain policies, the risk register and vendor risk assessments
Keep us compliant as regulations evolve, with a focus on GDPR, the EU AI Act and US privacy laws
What you’ll bring
Must-have
2+ years of experience in data protection, privacy or GRC
Solid working knowledge of GDPR
Hands-on exposure to ISO 27001 and/or SOC 2
Comfortable talking with engineers about how data is stored, accessed and secured
Fluent English, written and spoken
Nice-to-have
Familiarity with the EU AI Act and US privacy laws (e.g., CCPA/CPRA), or a strong interest in learning them
A privacy certification such as CIPP/E, or an ISO 27001 certification
Experience with Vanta or a similar GRC platform
Experience in a SaaS or tech company
How you’ll work
Work closely with our CTO, IT Manager and DevOps Manager, and with Sales on enterprise deals
In your DPO capacity, operate independently with direct access to senior leadership, as GDPR requires
Your first 90 days
Get to know our products, data flows and customers, and step into the DPO role
Review and update the RoPA, DPIAs and subprocessor list
Build a security questionnaire answer library in Vanta, based on our policies, audit evidence and past responses
Support the next ISO 27001 / SOC 2 audit cycle together with IT
Why Work for Bolt Insight?
At Bolt Insight, we’re a vibrant and growing start-up mentality business with a passionate team that thrives on innovation and collaboration. Here’s what you can expect when you join us:
Remote working and the flexibility to work in a nomadic way - Enjoy the best of both worlds, balancing work and life your way.
Flexible working environment - We trust you to manage your time and work in a way that suits you best.
Private Medical Insurance - Your health and well-being are important to us, and we’ve got you covered.
Virtual or local team gatherings - Whether online or in person, we love to connect and celebrate our successes together.
In-house recognition awards - We celebrate our ‘lightning bolts’ (those who go above and beyond) and show our appreciation for hard work!
At Bolt, curiosity, creativity and passion matter most. If you’re excited about shaping the future of research and contributing to a culture built on innovation and collaboration, we’d love to hear from you.
Bolt Insight is an equal opportunities employer committed to creating and maintaining an inclusive, diverse and professional workplace for all. We strive to create a welcoming environment where all individuals, no matter their background or identity, feel valued and supported.
If you have specific requirements throughout the recruitment process, please reach out to a member of our HR team who will make the appropriate adjustments.
Apply today and join a dynamic, international team driving innovation across borders!