Data Protection Officer (DPO)

Data Protection Officer (DPO)

About the role
We’re hiring a Data Protection Officer (DPO) to join Risk & Compliance at Vipps MobilePay.
Your mission is to enable growth while safeguarding the personal data of millions of users across the Nordics. As we expand beyond payments into data-driven services, marketing solutions, and AI-enabled products, privacy must remain a competitive advantage.
The DPO is part of the second line of defence and reports to the Chief Risk & Compliance Officer, with direct access to the Leadership Team and Board, as required under GDPR. This is not a passive oversight role. You will engage deeply in high-risk product launches, incidents, and regulatory matters — ensuring outcomes are robust, timely, and defensible.
Preferred location for this role is Oslo as The Norwegian Data Protection Authority is our Lead Supervisory Authority (GDPR Art. 56).

What you will do

• Advise on and monitor compliance with GDPR and related frameworks (AI Act, ePrivacy, consumer and marketing laws)
• Own and evolve the company’s data protection framework and reporting
• Challenge and escalate gaps in first-line implementation; ensure remediation is defined and executed
• Provide early-stage privacy guidance in product development and AI initiatives
• Lead oversight of high-risk processing (e.g., profiling, automated decision-making, cross-border transfers)
• Act as the primary contact for Data Protection Authorities
• Ensure effective handling of data subject requests and personal data breaches, including timely regulatory reporting
• Safeguard DPO independence under Article 38 of the GDPR

What we’re looking for

• Strong experience in privacy and data protection; a legal background is preferred
• Deep knowledge of GDPR and Nordic data protection practices
• Good understanding of modern technology, data architectures, and AI systems
• Experience engaging with supervisory authorities
• Ability to lead without formal authority and operate effectively in fast-scaling environments
• Excellent communication skills in English and at least one Scandinavian language

You see privacy as a trust enabler, not a blocker. You combine legal depth with technological curiosity and a pragmatic, risk-based mindset. You are comfortable challenging senior stakeholders, operating under pressure, and driving incidents to root cause and resolution. You balance independence with hands-on engagement, and you help the business move fast, safely.

Interested?
If this role sounds interesting, we would very much like to hear from you. Apply as soon as possible, as we will conduct interviews on an ongoing basis. It’s easy to submit an application, simply write a short note about yourself below and upload your CV.
We believe diverse perspectives strengthen our team. If you’re interested in the role but don’t meet every requirement, we’d still be happy to hear from you