EU remote
Data protection and compliance Legal - Apprenticeship
About this role
🪐 Discover our galaxy Join the Future of Work ! Malt is Europe's leading freelance marketplace, connecting over 1,000,000 talented freelancers with 100,000+ companies. Founded in 2013, we're transforming how work gets done through our tech-powered, human-centered platform. What makes us different: - A diverse team of 600 Malters across 6 European countries - A culture that champions equality (50% of our Comex are women) and inclusive growth - Backed by top investors including ISAI, Serena Capital, Eurazeo Growth, Goldman Sachs, and BPI - A mission to give everyone the freedom to work differently Ready to help shape the future of work? Your next chapter starts here! 🪐 At Malt we believe that Ambition is the Way, so all lists of missions and responsibilities are non-exhaustive.
Explore your future career 🔭 Join Malt’s Legal team and work closely with our Data Protection Officer (DPO) and Compliance Officer. Help strengthen data protection and regulatory compliance across Malt’s operations. Contribute to practical GDPR compliance, third-party vendor reviews and the maintenance of privacy records. Support regulatory monitoring and internal compliance initiatives in a fast-moving, technology-driven environment.
Key responsibilities ✨ Assist with the intake, verification and handling of Data Subject Access Requests (DSARs), ensuring they are logged and tracked within statutory deadlines. Conduct third-party vendor privacy risk assessments and review Data Processing Agreements (DPAs). Support Data Transfer Impact Assessments (DTIAs) and process assigned vendor reviews within the target five-day service level. Audit and update the Record of Processing Activities (ROPA) and other privacy registers under DPO guidance.
Monitor relevant regulatory developments, including GDPR, the EU AI Act and NIS2, and prepare concise legal briefs. Support internal compliance queries, KYC/AML checks and ethics policies, as needed. Refresh internal policy guides and help design employee privacy-awareness training resources. About you 🧑🚀 Currently enrolled in a Master’s degree ( Master 2) or École du Barreau (EFB / HEDAC, etc.) specializing in GDPR and digital regulatory frameworks.