Data Protection & Quality Management Officer (GDPR/ISO 9001)

Location: Remote-first across Germany with a hybrid setup; occasional travel and on-site presence in Berlin, Dresden, Hamburg, and other locations across Germany, with more frequent on-site work during initial implementation.

Company

hirify.global is building a Kubernetes-based, petabyte-scale data intelligence platform delivered as B2B SaaS or self-hosted on-premises, including air-gapped deployments, for defence, law enforcement, government, and enterprise customers.

What you will do

• Build and maintain the data protection management system, including policies, processes, records, agreements, TOMs, DPIAs, and data subject request handling.
• Act as the appointed DPO under GDPR Articles 37–39 and § 38 BDSG, advising management and teams on GDPR, BDSG, and TDDDG requirements.
• Advise on privacy by design, international data transfers, retention, and personal data breaches; monitor compliance and report risks.
• Build and maintain the ISO 9001 QMS, including process documentation, quality objectives, risk-based thinking, and continual improvement.
• Own the internal audit programme, track nonconformities and corrective actions, coordinate certification and surveillance audits, and prepare the annual management review.
• Train teams, facilitate workshops and audits, and coordinate with the Information Security Officer while maintaining independent responsibilities.

Requirements

• Certified DPO training from GDD, TÜV, DEKRA, or an equivalent provider, with at least 3 years of hands-on GDPR experience.
• At least 2 years of practical ISO 9001 experience and an internal auditor qualification based on ISO 19011.
• Experience building and maintaining data protection management systems and QMS documentation.
• Independence to challenge management, sound judgement when prioritising risks, and a pragmatic implementation approach.
• Hands-on mindset and confidence working with technical and non-technical stakeholders.
• German and English at C1 level or above.
• Willingness to travel occasionally within Germany and work in a hybrid setup combining remote work with on-site activities.

Nice to have

• Experience in a software, SaaS, or AI company.
• Familiarity with ISO/IEC 27001, AQAP standards, GRC platforms, or document control systems.
• CIPP/E or comparable certification.
• Experience leading a first ISO 9001 certification.

Culture & Benefits

• Remote-first work across Germany with regular team gatherings in Berlin and other off-site locations.
• Flexible working hours and a home-office equipment budget.
• 30 days of vacation and personal and professional development support.
• Performance bonuses tied to agreed objectives and key results.
• Team events, including summer and Christmas parties, plus a welcome goodie bag.
• Work on public safety and national security challenges with tangible impact.