Data Protection Monitoring Associate

We're looking for a Data Protection Monitoring Associate in Tallinn to be part of our Office of the Data Protection Officer (ODPO), which acts as a privacy advisory and monitoring function for Bolt.

About us

With over 200 million customers in 50+ countries, Bolt is one of the fastest-growing tech companies in Europe and Africa. And it's all thanks to our people.

We believe in creating an inclusive environment where everyone is welcome, regardless of race, colour, religion, gender identity, sexual orientation, age, or disability.

Our ultimate goal is to make cities for people, not cars, and we need your help to achieve this mission

About the role

As a Data Protection Monitoring Associate, you will work closely with Bolt's Privacy Legal Team and will be responsible for monitoring and advising on Bolt's ongoing privacy compliance obligations.

This role is well-suited for someone who thrives in an international business environment and wants to contribute to Bolt's mission of building the future of mobility. It's a unique, once-in-a-lifetime opportunity to be part of shaping what comes next

Main Tasks & Responsbilites:

• Monitor legal and regulatory developments in privacy laws, guidance, and best practices across Bolt's markets, and proactively identify compliance gaps and remediation needs.
• Support day-to-day privacy compliance, including DPIAs, data subject rights requests, privacy mailbox monitoring, and maintaining mandatory registrations, DPO details, and records of processing activities.
• Advise the Privacy Legal Team on features, projects, and initiatives involving personal data, providing clear and practical guidance.
• Maintain and enhance Bolt's privacy framework, including internal privacy policies, procedures, and mandatory audits.
• Deliver training and awareness initiatives to internal teams, helping promote the Privacy Team as a centre of excellence within Bolt.
• Collaborate cross-functionally with Legal, Public Policy, Finance, Tax, Customer Support, Marketing, and other teams to ensure consistent, holistic privacy guidance across the business.

About you:

• You have at least 2 years of experience specialising in privacy within a law firm, regulator, and/or international company.
• You communicate excellently in English, both in writing and verbally, and can convey complex topics clearly.
• You bring a solution-oriented approach, strong analytical skills, and the ability to work independently, proactively, and collaboratively across multiple jurisdictions.
• You are well-organised, able to prioritise effectively, and consistently deliver work on time.
• You ideally have completed a legal qualification and/or hold recognised data protection certifications such as IAPP CIPP/E.
• You may also have experience in regulatory or breach investigations and direct engagement with data protection regulators.

Experience is great, but what we really look for is drive, intelligence, and integrity. So even if you don't tick every box, please consider applying if you feel you're the kind of person described above

Why you'll love it here:

• Play a direct role in shaping the future of mobility.
• Impact millions of customers and partners in 600+ cities across 50+ countries.
• Work in fast-moving autonomous teams with some of the smartest people in the world.
• Accelerate your professional growth with unique career opportunities.
• Get a rewarding salary and stock option package that lets you focus on doing your best work.
• Enjoy the flexibility of working in a hybrid mode with a minimum of 2 days in the office each week to foster strong connections and teamwork.
• Take care of your physical and mental health with our wellness perks.

*Some perks may differ depending on your location and role.

#LI-Hybrid