Management, implementation, and oversight of all legal and compliance-related matters.
Continuous development and maintenance of the Information Security Management System (ISMS).
Processing and responding to information security questionnaires from suppliers and customers.
Ensuring that all customer requirements regarding information security are identified and met.
Planning and coordinating the implementation of technical and organizational security measures.
First point of contact for all internal and external data protection inquiries and coordination of all related activities.
Close coordination and collaboration with our external Data Protection Officer (DPO).
Active involvement in designing, implementing, and monitoring data protection processes.
Responding to data protection-related questions from new customers.
Managing the contract process with customers based on standard agreements.
Coordinating collaboration between internal legal support and external lawyers.
Final quality assurance of contract documents.

University degree (e.g., Law, Business Law, Business Administration with a relevant specialization) or an equivalent qualification.
Proven professional experience in compliance, ideally with exposure to information security and data protection.
Familiarity with concepts such as retention/deletion periods, deletion policies, AVV (data processing agreement / DPA), and PII.
At least a basic understanding of the requirements of ISO 27001.
Structured, independent, and highly meticulous working style.
Strong communication and coordination skills.
Pragmatic and solution-oriented mindset.
You speak and write German at native level.

Head of Legal & Compliance – Part-time position

Key skills