Group DPO and Security Compliance Officer

Confirmo is a stablecoin payment infrastructure provider trusted by market leaders. Founded over a decade ago by crypto natives, we're one of the first crypto payment processors in the world and have built one of the most established infrastructures in the industry. Over the past 4 years, we have been growing exponentially (130+%) and expanding across the U.S., Middle East, and Europe. As part of our continued growth, we are now expanding our legal and compliance team in Prague.

We work with enterprise clients who hold us to the highest standards on security and data protection. Their CISOs run thorough security reviews, they expect certifications like SOC 2, and as a group operating across the EU and the UAE, we take our data protection obligations seriously.

We are looking for a senior, hands-on colleague to own both. As Group DPO, you will act as the Data Protection Officer for our Irish and UAE entities and provide data protection services across the group, including handling data subject access requests. As Security Compliance Officer, you will run our ISO 27001 and SOC 2 certifications which are in progress, maintain DORA compliance, maintain the group-level policies and procedures, and represent Confirmo's security posture directly - to regulators, to existing clients, and to prospects who need to be satisfied before they commit.

This is not a management role, and it is not a role that hands the work to consultants. You will personally update policies, prepare the evidence, run the audits, and sit on the calls. You will report to our Chief Legal Officer and work alongside the Head of Security, who provides the deep technical context. You do not need to be a technical engineer yourself, but you do need a solid understanding of how modern security works.

• →

• Experience in crypto, virtual assets, or stablecoin / payments infrastructure.

• Familiarity with MiCA and the broader EU operational-resilience and crypto regulatory landscape.

• Experience running compliance across a multi-jurisdiction group (EU, US, and the Middle East).

• Relevant certifications (e.g., CISA, CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor).

• Experience operating a public Trust Page using tooling such as Vanta, Drata, or similar.

Location: Hybrid, based in Prague. This is not a fully remote role.

If you are interested in learning more, please submit your CV, and our recruiter will get back to you promptly.