Group DPO and Security Compliance Officer

About the role

Confirmo, a leading stablecoin payment infrastructure provider, is expanding its legal and compliance team in Prague. The Group DPO and Security Compliance Officer will act as the Data Protection Officer for Irish and UAE entities and drive security certifications across the group.

Key responsibilities

• Own GDPR and UAE data protection compliance, handle data subject requests, conduct training and maintain group‑wide policies.
• Manage ISO 27001 and SOC 2 certification lifecycles, including controls, evidence collection, audit preparation and re‑certification.
• Support sales by responding to enterprise security questionnaires, due‑diligence calls and prospect audits.
• Maintain DORA compliance, evaluate other operational‑resilience frameworks and review contractual data‑protection clauses.
• Author, version and harmonise all information‑security policies, standards and procedures for the Confirmo Group.
• Run the public Trust Page and represent Confirmo to regulators, auditors and clients.

Required profile

• Proven experience as a DPO in the EU and willingness to learn UAE data‑protection law.
• 6+ years of senior GRC experience in fintech, payments or technology environments.
• Hands‑on experience leading ISO 27001 and/or SOC 2 certifications.
• Strong ability to communicate with regulators, enterprise clients and prospect security teams.
• Fluent written and spoken English; Czech is a plus.

Required skills

• ISO 27001 implementation and audit
• SOC 2 certification process
• GDPR and UAE data‑protection regulations
• DORA compliance framework
• NIST Cybersecurity Framework (CSF)