Job Description

Data Protection Associate - German speaking (all genders) - Limited Contract

Location: Berlin or Norderstedt, Germany (in-office or hybrid) preferred. Bucharest, Romania or Barcelona, Spain also possible (in-office or hybrid).

Contract: Fixed-term contract from 1st October 2026 until 31st December 2027 (temporary position to cover a maternity leave)

Language(s): English (C1/ C2) and German (C1/ C2)

Serrala is the global leader in finance process automation. For over 40 years, we have been advancing the office of the CFO with our award-winning suite of finance automation applications.

Our solutions streamline all working capital-related processes, including Order to Cash, Procure to Pay, Cash Flow Management, and Treasury, across both cloud and SAP environments.

Our 10+ hubs across Europe, North America, and India support over 2,800 clients worldwide, reflecting the trust we've built with a diverse global community.

Join us as we lead the future of finance automation!

About the role:

We are looking for a Data Protection Associate to support our compliance activities with a focus on privacy and emerging AI-related regulatory requirements. In this role, you will help ensure compliance with applicable regulations, support internal stakeholders, and contribute to the continuous development of our compliance framework.

Please note: This is a temporary position to cover a maternity leave, with a fixed-term contract from 1st October 2026 until 31st December 2027.

Your Day to Day: 

• Collaborate with Data Protection, Legal, and Security teams to ensure compliance with data protection laws, AI Regulation and other technical compliance topics, while supporting the development of sensible practices for compliance.
• Assist Development and Product teams in aligning with data protection requirements and best practices, and support Serrala's transformation process for compliance.
• Provide support to colleagues on data protection queries, new processing activities, and the investigation and resolution of compliance matters.
• Aid in auditing, reviewing, and improving compliance-related policies, procedures, and controls, as well as conducting internal and external data protection and AI compliance risk assessments and audits.
• Prepare and negotiate data processing agreements, review transfer impact/risk assessments, and manage subject access request process and individual rights.
• Monitor compliance with data protection laws and policies, maintain records of processing activities and data protection and AI compliance documentation (e.g. TIA, LIA, FRIA, ROPA, AI Register), manage data breaches, and promote a culture of data protection compliance throughout the organization.
• Understand and negotiate Serrala's customer-facing MSAs and other customer agreements vis-à-vis customers with a strong data protection focus.
• Support and align with Serrala's Data Protection Officer.

What makes you excel in this position: 

• Background: University degree in law (state exam, JD or bachelor's degree in law) and recognized data protection qualification (e.g. CIPP/E, CIPT, CIPM, TÜV Certified DPO).
• Data-Protection: Prior work experience of at least three years in a law firm or in-house legal team with a focus on data protection.
• Audits & Legislation: Sound knowledge and practical experience with the implementation and audit data protection legislation matters (particularly, in DACH region).
• AI regulations: Experience with data protection regulations and AI-related regulatory requirements.
• Soft skills: Good communication and interpersonal skills are essential, as you will need to build and maintain relationships both internally and externally.
• Self-starting: Organized and able to work proactively to effectively coordinate/resolve activities with the aim of supporting business objectives and timelines, in a compliant manner.
• Strong communicator: Excellent spoken and written German skills and excellent spoken and written English skills.

Welcome additional experience:

• Experience with or knowledge of ISO27000's family of standards.
• Experience with or knowledge of BSI Standards or EU recognized certification mechanisms.
• Experience with FinTech-related regulations/guidelines and understanding of their impact in data protection compliance practices.
• Experience with implementing or knowledge of Privacy Maturity Models.

Why you’ll love it here

Step into a dynamic, agile workplace where continuous learning is championed by leadership, and innovation in finance automation is fuelled by cutting-edge tech, AI integration, and strategic SAP transformation. We partner with the best to stay ahead - so you can too.

At our core, we're Reliable, Passionate, Empowering, and Enterprising - committed to lasting customer and employee relationships, bold innovation, and your growth every step of the way.

EEO Statement

We are proud to be an equal opportunity workplace. We celebrate and support diversity by providing equal employment opportunities regardless of race, creed, color, religion, age, sex, national origin, disability or handicap, genetics, protected veteran status, sexual orientation, gender identity or expression, arrest record, or any other characteristic protected by federal, state, or local laws.

To all recruitment agencies

Serrala does not accept agency resumes. Please do not forward resumes to our job alias, Serrala employees or any other organization location. Serrala is not responsible for any fees related to unsolicited resumes.