Legal Counsel - Data Protection

at  SumSub

Sumsub is the one verification platform to secure the whole user journey. With Sumsub’s customizable KYC, KYB, transaction monitoring and fraud prevention solutions, you can orchestrate your verification process, welcome more customers worldwide, meet compliance requirements, reduce costs and protect your business.
Sumsub has over 2,500 clients across the fintech, crypto, transportation, trading and gaming industries including Bitpanda, Wirex, Avis, Bybit, Huobi, Kaizen Gaming, and TransferGo.
We are seeking an experienced and knowledgeable Legal Counsel to join our Data Protection team.
As a key member of our global legal team, you will play a pivotal role in shaping and implementing cutting-edge data protection, security, and privacy policies, ensuring compliance across the EMEA, APAC, US and other regions. You will also be responsible for keeping abreast of emerging data protection legislation affecting the regions in which we provide service.

• Maintain and update data protection, security, and privacy policy documents and procedures.
• Assist with data deletion and Data Subject Access Requests (DSARs).
• Keep abreast of emerging data protection legislation affecting the regions in which we provide service.
• Work closely with IT, Marketing, Finance, and HR to lead projects ensuring compliance with the GDPR and other data protection legislation.
• Collaborate with the product team to introduce new services, ensuring they align with data protection regulations and incorporate privacy-by-design principles from the outset.
• Deliver (or oversee delivery of) GDPR training (in some cases bespoke to the business team) to all new starters, carry out ad-hoc training related to data storage, retention, sharing and deletion of all data.
• Support the review and drafting of data protection contractual terms in agreements with customers and suppliers, including DPAs, DTAs, and other relevant agreements.
• Ensure Sumsub and its customers collect valid consents for data processing and manage consent/consent withdrawal forms.
• Take part and monitor registrations of data processing in multiple countries.
• Respond to privacy related queries and providing accurate, appropriate, timely and pragmatic advice.
• Support the maintenance of the firm’s ISO 27001 and other certifications.Assist with the onboarding of new technologies and / or vendors.