Compliance & Legal Specialist

Location: EMEA Region (Remote-First) Type: Full-Time Level: Mid to Senior

Join Pumpfiat as a Compliance & Legal Specialist and safeguard our mission of ethical, permission-based outreach. You’ll own compliance strategy, ensure adherence to global data privacy laws, and protect both our clients and prospects.

About the Role

You’ll be the guardian of data ethics at Pumpfiat, ensuring every record, process, and campaign meets the highest standards of GDPR, CCPA, CAN-SPAM, and emerging regulations. Working closely with engineering, product, and operations, you’ll embed compliance into our DNA while enabling rapid, confident growth.

This is a remote-first role with a strong preference for candidates based in the EMEA region to align with key regulatory jurisdictions.

Key Responsibilities

• Own ongoing compliance with GDPR, CCPA, CAN-SPAM, CASL, and other global data privacy regulations.
• Maintain and enhance consent management systems, metadata tracking, and audit trails.
• Conduct regular risk assessments, data mapping, and compliance audits.
• Draft and update privacy policies, terms of service, and client-facing compliance documentation.
• Advise engineering and product teams on privacy-by-design principles and regulatory impact.
• Manage data subject requests (DSARs), deletion workflows, and suppression lists.
• Stay ahead of evolving regulations and guide strategic compliance roadmap.

What We’re Looking For

• 4+ years in data privacy, compliance, or legal roles (in-house or consultancy).
• Deep knowledge of GDPR, CCPA/CPRA, CAN-SPAM, and global anti-spam laws.
• Experience implementing consent management, audit logging, and DSAR processes.
• Ability to translate complex legal requirements into practical engineering and operational guidance.
• Strong analytical skills and attention to detail.
• Excellent communication — you can explain compliance clearly to technical and non-technical stakeholders.
• Passion for ethical data use and protecting individual privacy rights.

Nice to Have

• CIPP/E, CIPP/US, CIPM, or similar privacy certification.
• Experience in marketing technology, email deliverability, or data brokerage.
• Familiarity with SOC 2, ISO 27001, or other information security frameworks.
• Background working in a fast-paced startup environment.

Apply for This Role

Fill out the form below. We'll review your application and get back to you within 3-5 business days.

Full Name *

Email *

Phone (optional)

LinkedIn / Website *

Resume / CV (link to PDF or Google Drive) *

Why are you excited about Pumpfiat and this role? *

Describe your experience implementing GDPR or CCPA compliance in a technical environment.

Anything else we should know? (availability, certifications, salary expectations, etc.)

Don’t see your role? We’re always open to exceptional talent. Send us your resume.