Role Description At Nortal, we believe complexity doesn't have to mean complicated. That mindset shapes the way we approach compliance, too. As technology evolves and regulation grows more complex, the challenge isn't just understanding the rules—it's turning them into practical ways of working that help the business move forward. That's what makes this opportunity different. Rather than focusing on a single area, you'll work across AI governance, data protection, regulatory change, and emerging legislation. This means no two challenges are quite the same. If you enjoy connecting the dots, solving complex problems, and learning something new every week, keep reading. - Maintain the AI governance operating model for the Nortal Group, including the structures, processes, and accountability frameworks for managing AI-related risks and compliance. - Lead the interpretation and implementation of AI regulations, particularly the EU AI Act, translating requirements into internal guidance and governance standards. - Drive collaboration across legal, compliance, information security, product, and business teams to embed AI governance principles into day-to-day operations. - Provide GDPR support, including evaluating software approval requests, managing data breach and notification processes, handling data subject rights, and maintaining GDPR registers. - Lead the regulatory monitoring function, tracking legislative developments and emerging compliance obligations. - Support the compliance risk programme, including policy management, due diligence, internal audits, investigations (including whistleblowing cases), and conflict of interest processes. - Deliver and coordinate AI and compliance training across the organisation. Qualifications - At least 5 years of experience in a compliance, legal, or governance role, including work across international jurisdictions, ideally within a technology or professional services environment. - Law degree (LLB, LLM, or equivalent), or a degree in a closely related field. - Demonstrable knowledge of AI regulation (particularly the EU AI Act), GDPR and data protection principles, with hands-on experience in privacy operations and policy drafting. - Strong regulatory interpretation skills, with the ability to translate complex regulatory frameworks into clear, practical guidance for the business. - Excellent stakeholder management to collaborate across functions, including with legal, information security, HR, and business teams. - Strong project management skills to drive global regulatory monitoring and risk management. - Fluency in English, additional European languages are a plus. Benefits - We hire people not only for their skills but also for cultural add. - We care about your growth & development with support for constant improvement and knowledge sharing via Learning Hives, external and internal training, dedicated time for self-learning, a mentorship program, and strong 1:1 culture. - We prioritize your health & well-being by providing a flexible package for health insurance and sports initiatives. - We support your work-life balance and provide flexible working hours. - It's your choice whether you want to work from the office or remotely with our Work From Anywhere program. - We have also launched the Nortal Nomad program for people wanting to move short-term to some other country. Salary range 3500-4500€ gross/monthly (full-time). Final compensation will depend on factors such as relevant experience, role seniority, and skill set. Company Description For over 25 years, we’ve been shaping digital transformation, delivering complex solutions for global enterprises and public sector organisations. Today, we are at the forefront of an AI-driven transformation era, helping organizations turn data into real business value. By combining deep domain expertise with data and AI, we design solutions that create immediate impact while scaling for the future. We believe complexity doesn’t have to mean complicated, and that the best solutions are those that work in the real world, not just on paper. That’s why our clients trust us with their most ambitious, business-critical initiatives.