Job Description

About us:
Luno is the crypto investment app you can rely on, enabling you to buy, store and explore crypto securely. We're committed to putting the power of cryptocurrency in everyone's hands sensibly and responsibly.
Since 2013, we've helped millions of people around the world invest safely in crypto. We do this by cutting through the hype and supporting customers at every step of the way. All products and cryptocurrencies on our platform must first meet stringent legal, risk and technical security standards.
Transparency is key for us. Luno stores all crypto on a 1:1 basis and we have rigorous processes in place so you can be confident your investment is secure. We're available in more than 40 countries around the world and we work closely with respective regulators in all of these markets to be fully compliant, as we believe this is the best way to help everyone, everywhere, invest safely.
About the team:
Luno's mission is to put the power of crypto in everyone's hands and our exceptionally talented Legal team ensures that we are on solid legal ground every step of the way.
The team exists to provide Luno and its people with the best environment possible to achieve our mission. Whether that's by putting policies and procedures in place to protect our customers and their funds, working with regulators and law enforcement for the benefit of the industry as a whole, or working out the finer details of complex relationships with third parties, we're here to ensure the foundations are in place for Luno to succeed.
The role in a nutshell:
We're looking for someone exceptional to join our team as Privacy Associate. You will be an integral part of a growing Legal team that seeks to provide world-class service to our business globally.
You will play an integral part in the implementation and development of our data protection programme by working closely with colleagues to embed privacy considerations into our products, technology and operations and providing clear,and pragmatic advice on privacy and data protection matters impacting a rapidly growing and truly global business in a pioneering industry. The role requires you to be dynamic and commercially minded, and to problem solve for the business on a day-day basis.
Your mission will be:

• Implementing and maintaining company-wide data protection policies and standard operating procedures to ensure compliance with global privacy laws and regulations.
• Providing clear and pragmatic privacy advice to teams working on new products, services and business processes.
• Support internal business stakeholders to perform data protection impact assessments on new and existing products, services and business processes to identify and mitigate risks to individuals.
• Collaborate with business stakeholders to maintain the record of processing activities and other compliance documentation such as privacy notices, transfer impact assessments and safeguards, legitimate interest assessments, consent forms, etc.
• Manage responses to data subject rights requests and complaints.
• Support the development and delivery of data protection training and play a key role in raising awareness of privacy and data protection within the company.
• Support the response to security incidents and personal data breaches, including assessing risk posed by incidents, providing advice to senior management and reporting to regulators.
• Perform privacy due diligence on vendors and third parties, including reviewing and providing advice on vendor terms of service, data processing agreements and data sharing agreements.

A little about you:

• Relevant experience (which can include articles of clerkship, but it is not compulsory) in privacy compliance in a legal, compliance or IT security role with a solid grounding in one or more data protection laws (such as the EU GDPR, South Africa's POPIA, Malaysia's PDPA, etc.).
• Strong academic credentials, preferably with a bachelor's degree in a relevant field such as law, information technology or cybersecurity. Articles beneficial but not essential for lawyers.
• Meaningful experience handling data subject rights requests, conducting data protection impact or similar risk assessments, managing security incidents and personal data breaches and reviewing vendor contracts.
• Experience advising on privacy aspects of new products, services, business partnerships and marketing initiatives (beneficial).
• Experience with privacy operations software such as OneTrust, Trustworks, etc. (beneficial).
• Knowledge of and experience working with data protection compliance frameworks.
• Excellent communication skills, analytical rigour, and high attention to detail.
• The ability to manage and deliver on multiple projects with competing deadlines.
• Sound business judgement, and a pragmatic approach, producing top quality, concise and practical privacy advice across a broad range of matters.
• Willingness and flexibility to learn and adapt in an exciting and evolving industry.
• The ability to think critically and creatively to solve complex problems, while protecting Luno from unacceptable risk.
• The ability to work across teams, functions and geographies, with high autonomy.

Life at Luno:

• Remote but reachable work policy gives you the freedom to choose between working from home or the office.
• Plus the option to buy and sell up to 5 days leave
• Improve body and mind, with excellent private medical insurance
• Access to Learnably and our additional learning platforms for your personal and professional development
• 6 months primary care-giver leave
• Paw-ternity leave for your furry friend
• Annual Inspiration Day in addition to your annual leave which increases based on your length of service!
• A collaborative, friendly work community, with regular social events and virtual cooking, dancing, drawing and house planting classes hosted by our Lunauts
• Free lunch and snacks
• 0 fees up to a certain amount with Luno from the day you start.*

*Offer only available on Luno Instant Buy, not Luno Exchange.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Skills Required