Data Protection & Quality Management Officer
Job description
Data Protection & Quality Management Officer at Orcrist Technologies, owning the GDPR data protection framework as appointed DPO and building and operating the ISO 9001 quality management system. Both are independent staff functions reporting directly to C-Level Management.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid · Berlin, Germany · Dresden, Germany · Hamburg, Germany
- Languages
- German – C1, English – C1
What you'll do
- Build and maintain our data protection management system, including policies, processes, and documentation.
- Act as our appointed DPO under Art. 37–39 GDPR and § 38 BDSG, advising management and teams on GDPR, BDSG, and TDDDG requirements.
- Monitor compliance, including records of processing activities, processor agreements, TOMs, data protection impact assessments, and data subject requests.
- Advise on privacy by design, international data transfers, retention, and personal data breaches.
- Build and maintain our ISO 9001 QMS, including process documentation, quality objectives, risk-based thinking, and continual improvement.
- Own the internal audit programme, track nonconformities and corrective actions, and coordinate certification and surveillance audits.
- Prepare the annual management review and report on data protection risks, audit findings, and improvement priorities.
- Train teams on data protection and quality management requirements.
- Work closely with the ISB to align overlapping requirements while maintaining clear responsibilities and independence.
- Travel occasionally to our offices in Berlin, Dresden, and Hamburg, as well as to other workshop locations across Germany, to facilitate workshops, training sessions, and audits.
What we're looking for
- Certified DPO training (GDD, TÜV, DEKRA, or equivalent) and at least 3 years of hands-on GDPR experience.
- At least 2 years of practical ISO 9001 experience and an internal auditor qualification based on ISO 19011.
- Experience building and maintaining data protection management systems and QMS documentation.
- The independence to challenge management, the judgement to prioritise risks, and a pragmatic approach to implementation.
- Hands-on mindset and confidence working with technical and non-technical stakeholders.
- Willingness to travel occasionally within Germany and work in a hybrid setup, combining remote work with on-site activities.
- German and English at C1 level or above.
Nice to have
- Experience in a software, SaaS, or AI company.
- Familiarity with ISO/IEC 27001.
- Familiarity with AQAP-Standards.
- CIPP/E or comparable certification.
- Experience leading a first ISO 9001 certification.
- Experience with GRC platforms or document control systems.
Benefits
Remote-first, Germany-wide: Work from wherever you do your best work, with regular team gatherings in Berlin and other off-site locations.
Good people, good times: From summer and Christmas parties to regular team gatherings, we make time to celebrate together.
- Flexibility by default: Flexible working hours help you make work fit your life.
- Your setup, your way: Get a personal home-office equipment budget to create a workspace that works for you.
- 30 days of vacation: Take the time you need to recharge and come back with fresh energy.
- Keep growing: We invest in your personal and professional development.
- Get rewarded for impact: Performance bonuses are tied to agreed objectives and key results.
- A warm welcome: Every new team member gets a welcome goodie bag.
- A mission that matters: Work on challenges with tangible impact on public safety and national security.
Apply
About Orcrist Technologies
Building a next generation data intelligence platform using cutting-edge technologies
Orcrist is building a next generation data intelligence platform using cutting-edge technologies. We're handling petabyte-scale data with sub-second queries. Our product is a Kubernetes‑based platform delivered as B2B SaaS or as a self‑hosted on‑prem solution, including air‑gapped deployments. We enable customers across defense, law enforcement, and enterprise to turn mission-critical data into actionable intelligence.
Key facts
- Handles petabyte-scale data with sub-second queries
- Kubernetes-based platform delivered as B2B SaaS or self-hosted on-prem, including air-gapped deployments
- Customers across defense, law enforcement, and enterprise
- Offices in Berlin, Dresden, and Hamburg