At **Mindera**, we believe that software is built by people, for people with high performance systems that impact users worldwide. We are looking for a **Compliance & Privacy Tech Lead** to join an agile, collaborative team where your voice matters as much as your code. **💪 How You'll Contribute** - **Data Classification & Permission:** Own and maintain the organisation's data classification schema, defining enforceable rules for AI tools and conducting data classification checks to ensure data permissibility across all risk tiers. - **AI Intake & Risk Support:** Support the triage of incoming AI tool requests, maintain the AI registry's data fields, coordinate vendor assessments, and ensure robust PII and sensitive data guardrails are documented before go-live. - **Compliance & Portfolio Management:** Monitor active tools for data boundary drift, detect shadow AI, run quarterly duplicate solution reviews, and flag anomalies in access or usage patterns to Security and Data Governance. - **Cross-Functional Collaboration:** Partner closely with Data Engineering to ensure governed data pipelines, and collaborate with Legal, Compliance, and HR to incorporate regulatory changes and promote data literacy. - **Governance Operations:** Prepare crucial input for Governance Board materials, maintain data policies and process guides, and track regulatory developments (GDPR, EU AI Act, NIST AI RMF, ISO 42001) to inform internal policy.

• Data Classification & Permission: Own and maintain the organisation's data classification schema, defining enforceable rules for AI tools and conducting data classification checks to ensure data permissibility across all risk tiers. • AI Intake & Risk Support: Support the triage of incoming AI tool requests, maintain the AI registry's data fields, coordinate vendor assessments, and ensure robust PII and sensitive data guardrails are documented before go-live. • Compliance & Portfolio Management: Monitor active tools for data boundary drift, detect shadow AI, run quarterly duplicate solution reviews, and flag anomalies in access or usage patterns to Security and Data Governance. • Cross-Functional Collaboration: Partner closely with Data Engineering to ensure governed data pipelines, and collaborate with Legal, Compliance, and HR to incorporate regulatory changes and promote data literacy. • Governance Operations: Prepare crucial input for Governance Board materials, maintain data policies and process guides, and track regulatory developments (GDPR, EU AI Act, NIST AI RMF, ISO 42001) to inform internal policy.

Role Description At Mindera, we believe that software is built by people, for people with high performance systems that impact users worldwide. We are looking for a Compliance & Privacy Tech Lead to join an agile, collaborative team where your voice matters as much as your code. We value empathy, self-organization, and the courage to take risks. If you love solving complex problems and believe that teaching others is the best way to learn, you’ll feel right at home here. We’re looking for someone who loves to build, learn, and guide others. You’ll be working closely with our leadership (CEO/COO) and our clients, so clear communication and a collaborative spirit are key. Responsibilities - Data Classification & Permission: Own and maintain the organisation's data classification schema, defining enforceable rules for AI tools and conducting data classification checks to ensure data permissibility across all risk tiers. - AI Intake & Risk Support: Support the triage of incoming AI tool requests, maintain the AI registry's data fields, coordinate vendor assessments, and ensure robust PII and sensitive data guardrails are documented before go-live. - Compliance & Portfolio Management: Monitor active tools for data boundary drift, detect shadow AI, run quarterly duplicate solution reviews, and flag anomalies in access or usage patterns to Security and Data Governance. - Cross-Functional Collaboration: Partner closely with Data Engineering to ensure governed data pipelines, and collaborate with Legal, Compliance, and HR to incorporate regulatory changes and promote data literacy. - Governance Operations: Prepare crucial input for Governance Board materials, maintain data policies and process guides, and track regulatory developments (GDPR, EU AI Act, NIST AI RMF, ISO 42001) to inform internal policy. Qualifications - Has Solid Experience: Brings 4+ years in a data governance, management, or compliance role, with 1 to 2 years specifically documenting enterprise-level data policies or classification schemas. - Is a Proactive Self-Starter: You naturally identify gaps and address them without waiting to be asked, while effectively managing a high volume of concurrent requests without losing track of detail. - Drives Cross-Functional Alignment: You are confident working across all levels—from Data Engineering to the Governance Board—and are experienced in managing structured review processes involving multiple stakeholders. - Has Exceptional Communication Skills: You have the ability to translate complex data policy, classification principles, and regulatory concepts into plain language for a broad, non-technical audience. - Has an Analytical Mindset: You are comfortable working with registry data, usage metrics, and risk criteria to draw actionable conclusions and influence technology strategy. Technical Toolkit - ITSM Platforms: Comfortable managing intake and workflows using tools like ServiceNow or Jira. - Documentation & Policy Management: Proficient with tools such as Confluence or Notion for process management. - Data Management & Registry: Experience working with registry tools such as Airtable or equivalent spreadsheet-based systems. - Regulatory Frameworks (Advantageous): Familiarity with standards and frameworks such as GDPR, NIST, ISO 42001, or the EU AI Act. - Data Platforms (Nice to have): Familiarity or experience working with data catalog or data lineage tooling. Recruitment Stages - Screening - Reviewing CVs and eligibility verification. - 1st Call - 30 minute call to assess Technical & Culture Fit with IT Recruiter. - Tech Interview - 2 hour call with two of our Cloud Engineers to assess your technical knowledge in depth. The interview includes a theoretical section based on test-case scenarios as well as live practical exercises. - Cultural Interview - 1-hour call with a Minder to assess cultural fit with Mindera and align expectations for both parties. - Project/Client Call - A 30 minute to 1 hour call with the client or project team to assess your technical fit for a specific project and align expectations. Benefits - We work in a self-organization culture and therefore we offer a flexible, supportive environment where you are trusted to manage your own time and career. - Well-being First: health insurance and "Open Holidays" because we trust you to know when you need a break. - Flexible Working hours and Work: Work from our vibrant hubs in Porto, Aveiro, or Coimbra, or choose a remote setup that works for you. As long as you are based in Portugal :) - Career Growth: A dedicated budget for training and conferences, plus a transparent profit-sharing model. - Tools for Success: Choose Laptop & Peripherals that best suit your needs, plus Hotspot with unlimited usage (PT), for work or Netflix ;) - Team work makes the dream Work: Mindera Annual Trip, Sports, and sharing groups to connect and have fun! Company Description At Mindera, we use technology to build products we are proud of, with people we love. We believe diverse teams build better products. Mindera is a place where you can be your authentic self, regardless of gender, age, ethnicity, religion, or background. We strive to create an environment where everyone feels they belong and has an equal opportunity to grow. Most of all, you get to work with a group of great people in a politics-free environment where the whole team owns the project together. Our culture reflects our lean and self-management mindset, encouraging colleagues to take risks, make decisions, collaborate openly, and communicate with everyone. Freedom and responsibility go hand in hand, and we value commitment, feedback, and empathy. We are proud of our work and love learning about everything as we navigate an Agile, Lean, and collaborative environment. Curious to know more? Check out our Blog and our Handbook! Our offices are located: Porto, Portugal | Aveiro, Portugal | Coimbra, Portugal | Leicester, UK | San Diego, USA | San Francisco, USA | Chennai, India | Bengaluru, India | Cluj-Napoca, Romania | Blumenau, Brazil

• Serve as the primary IT point of contact for SAP-related requests from business users. • Lead all phases of SAP initiatives, from demand intake to solution release. • Facilitate and resolve conflicts between local IT, global IT, and business stakeholders.