At Bondora, our mission is simple: to make finance easy, transparent, and accessible for everyone. Founded in 2008, we’ve helped more than 700,000 customers across Europe borrow and invest effortlessly through our trusted digital products. As a rapidly growing financial technology company, we’re reaching new heights with a bold vision.

We’re set to acquire a banking license, unlocking a world of possibilities for our customers. This transition will allow us to expand our lending across more EU countries and broaden our product suite to deliver even more value. Join us on this journey and let’s build the future of finance together!

What is this role about? As our Group Privacy Lawyer, you will play a key role in shaping how privacy, data protection, and emerging AI regulations are integrated into Bondora's products, operations, and growth initiatives. Working at the intersection of law, technology, and business, you'll partner closely with Product, Marketing, Data, Security, Engineering, and Leadership teams to provide practical guidance that supports innovation, data-driven growth, and responsible decision-making in an evolving regulatory landscape.

This is a high-impact role with significant ownership and autonomy, where you'll influence company-wide decisions, build scalable governance frameworks, and help shape the next stage of Bondora's growth. We're looking for someone who thrives in a fast-moving environment, enjoys solving complex challenges, and is comfortable making pragmatic decisions while balancing legal risk and business objectives.

Responsibilities

will be: Own and continuously improve Bondora's privacy compliance framework across products and markets. Advise the business on GDPR, ePrivacy, AI Act, marketing compliance, and data processing matters. Partner with Product, Marketing, Data, Security, and Engineering teams to enable compliant innovation and growth.

Lead privacy assessments, including legitimate interest assessments, vendor reviews, data transfer assessments, and DPIAs. Develop scalable privacy governance processes, controls, and operational frameworks. Support regulatory inquiries, data subject requests, privacy incidents, and supervisory authority interactions.

Contribute to AI governance initiatives and legal assessments of AI-enabled products and automated decision-making. Drive privacy awareness and promote a strong compliance culture across the organization. While the role can be performed remotely from anywhere in Europe, we expect you to spend 4–5 working days every two months at our headquarters in Tallinn, Estonia.

What would ensure success in this role? Strong hands-on expertise in GDPR and broader EU privacy regulation. Experience advising technology, fintech, regulated financial services, SaaS, or other data-driven businesses.

Ability to independently conduct LIAs, support DPIAs, perform vendor privacy assessments, and analyze cross-border data transfers. Strong contract review and negotiation skills related to data processing and technology vendors. Experience supporting marketing, analytics, and customer data usage initiatives.

Strong stakeholder management and communication skills, with the ability to influence and collaborate effectively across the business. Strong commercial judgment and the ability to balance legal risk with business objectives while translating complex legal concepts into practical business guidance. Experience with AI governance and the EU AI Act, and the ability to operate effectively in fast-paced, high-autonomy environments.

What can you expect at Bondora? Contribute to Bondora’s ambitious goal of reaching 1BN in revenue. Your skills and efforts will directly impact our growth trajectory and shape our company's future.

Our employees deserve the best.

Benefits

package (5 weeks of vacation, private healthcare

Compensation

, hobby grant, mental healthcare support, share options and much more