Jobs › GDPR
GDPR Compliance Jobs
The GDPR is the EU's comprehensive data-protection law and the global benchmark for privacy.
The General Data Protection Regulation has been the world's reference privacy law since it took effect on May 25, 2018. It governs any organization that processes the personal data of people in the EU, wherever that organization is based, and it rests on principles of lawful basis, purpose limitation, data minimization, and accountability. It gives individuals enforceable rights, access, rectification, erasure, portability, and objection, and it requires breach notification within 72 hours, data protection by design, and, for many organizations, a Data Protection Officer.
The GDPR set the template that California, Brazil, India, and dozens of other jurisdictions have followed, so the skills it demands travel. As AI raises the stakes on every data decision, GDPR fluency has moved from a legal nicety to a core requirement for privacy, governance, and AI roles alike. Fines reach 20 million euros or 4 percent of global annual turnover.
GDPR: Frequently Asked Questions
Who must comply with the GDPR?
Any organization that processes the personal data of individuals in the EU, including organizations established outside the EU that offer goods or services to, or monitor, people in the EU.
What rights does the GDPR give individuals?
Rights of access, rectification, erasure (the right to be forgotten), restriction, data portability, and objection, among others.
What are the maximum GDPR fines?
Up to 20 million euros or 4 percent of total worldwide annual turnover, whichever is higher, for the most serious violations.
Open GDPR GRC jobs (78)
Data Privacy Consultant – ICT Risk
Information Security Analyst (f/m/x)
Client Assurance Analyst (Security Questionnaires)
Security Engineer, Corporate Security
Security Engineer
Compliance Senior Manager
Manager, Privacy Compliance
Vice President, AI Strategy & Transformation
GRC Manager
Privacy Legal Intern
Local Privacy Officer Italy
Privacy and Regulatory Counsel – Silicon Valley, CA (Remote) (1005-SLS)
Manager, Software Engineering (Marketing and Privacy Engineering)
Director, Governance Risk & Compliance
GRC Engineer
GRC Engineer
Compliance Manager
Head of Compliance, EU & UK
Senior Compliance Analyst, Customer Trust
Security-Compliance Program Manager
Third-Party Risk Management (TPRM) Risk Analyst
Sr. Cyber Assurance Analyst, Finance
Sr. Cyber Assurance Analyst, Starlink
IT Risk & Information Security Analyst
Senior Technical Architect (GRC)
GRC, Data Privacy & Technical Cybersecurity SME - Senior Manager
Technology and Security Risk Director
Staff Product Manager, Compliance
IT Risk Manager, BT Risk Management
Head of Environment and Sustainability
Senior Data Privacy Manager
Senior Privacy Counsel
Senior Manager, Accounts Payable & Freight Audit
Senior Staff Software Engineer - AI Governance
Senior Director, Product, Security and Privacy
Sr Legal Counsel VP (Vendor Contract Management / Privacy)
Incident Response Manager - Privacy
Internal Audit Senior Associate
Lead Security Compliance Engineer
GRC Principal - Data Privacy and Security
Associate General Counsel, Privacy – Remote (USA) (993-SLS)
Senior Risk Analyst
Senior Risk & Governance Engineer
Head of Privacy & Security
Staff Identity Governance and Access Engineer
Access Governance and Compliance Expert
Cybersecurity Requirements and Data Protection Lead
Data Privacy and Security Counsel (US Federal)
Information Security Controls Manager - Cloud & AI Governance
Senior Third-Party Risk Specialist
Compliance Director
Compliance Officer - Associate
Privacy Legal Counsel
Compliance Manager (Data Protection Officer, Regulatory Compliance & Privacy)
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Data Protection Specialist, Germany
Senior Compliance Officer, Japan
Staff+ Software Engineer, Privacy
Privacy Operations Program Manager
Staff+ Software Engineer, Privacy
Sr. Counsel, Privacy Compliance
DTE Audit & Compliance Manager (Sr. Principal Analyst)
Senior Technical Architect (Privacy)
Senior Manager, Information Compliance, AI Governance & Privacy
Senior Privacy Counsel
Director of IT Governance
Governance, Risk & Compliance Analyst
Senior AI Governance Counsel
Security, Risk and Compliance Consultant
Director of IT Governance
Director, Compliance & AI Governance
Staff Software Engineer - Data Governance
GDPR jobs: what the market looks like right now
A snapshot built from the 78 GDPR roles currently on this page.
What these roles pay by level
| Level | Median midpoint | Postings |
|---|---|---|
| Mid-level | $209k | 10 |
| Senior / lead / manager | $179k | 12 |
How these figures were calculated, and sources
Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modeled, or carried over from a previous month. It is recalculated each time the board refreshes.
What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director and executive / c-suite are present on this page but below that threshold, so no median is published for those bands.
What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.
For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 13-1041 — Compliance Officers, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.
Where the work is
- Work mode: 13 remote, 1 hybrid, 64 on-site or unstated.
- Seniority mix: senior (35), mid (31), director (7), executive (5)
- Employers hiring more than one: SEI (8), AlphaSense (3), OKX (3), Sanofi (3), OneTrust (3), Anthropic (3)
Skills these postings ask for
- data mapping and records of processing
- DSAR and rights request handling
- privacy impact assessments (DPIA/PIA)
- GDPR and CCPA/CPRA application
- vendor and transfer assessments
How to get a privacy job — the full career guide for this field: entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in GDPR postings to be worth knowing: CIPP/US, CIPP/E, CIPM, CIPT, AIGP. The certification academy covers what each one actually tests and who it is for.
Hiring for GDPR?
We have 78 open GDPR roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
All GRC jobs · Job alerts