About Assenteo
Assenteo is the data privacy company for AI-native businesses. We act as an on-demand privacy partner to fast-growing, data-sensitive startups, helping them build customer trust and meet complex regulatory requirements without slowing down. To date our team has supported more than 100 companies with data protection and compliance, working with names such as Lovable, Upheal and Duvo.ai.
Joining Assenteo means four things:
Attitude over experience
We hire for curiosity and drive, not a long CV.
Love for tech
We love the novel. We're here to shape the next big thing.
Output driven
We judge work by outcomes, not hours online.
Continuous curioisity
We don't accept the norm, move fast and strive for excellence.
The role
This is an ownership role, not a task list. You’ll run a portfolio of startup clients as their day-to-day privacy lead, spot what they need before they ask, and bring in new work. When you help win new business, you share in it through a percentage of the revenue. You’ll work alongside our Founder and CEO on the most strategic, DPO-level matters.
The role is designed to grow into senior privacy leadership as Assenteo grows: leading your own client portfolio and shaping how we deliver.
What you’ll do
You’ll own a portfolio of startup clients and act as their day-to-day privacy lead.
✔ Lead GDPR, UK GDPR, CCPA and EU AI Act compliance for your clients.
✔ Own DPIAs, ROPAs, gap analyses, and privacy policies, notices and procedures.
✔ Review and negotiate DPAs, and run vendor risk assessments.
✔ Review new products and features, including AI use cases, and advise client teams on privacy opportunity and risk.
✔ Handle privacy pushback from clients’ customers, including security questionnaires, FAQs and trust centres.
✔ Keep SOC 2 and ISO 27001 documentation current and clients audit-ready.
✔ Coordinate incident response and breach management.
✔ Spot new work within existing clients and help win new ones.
✔ Track regulatory change and find where AI tools can replace manual steps.
What you bring
Experience:
Around three years in data protection, privacy or compliance, ideally in startups or high-growth tech.
GDPR fluency:
A practical, working knowledge of GDPR and UK GDPR.
Client presence:
Confident with founders and senior stakeholders.
Proactive:
You juggle several clients and find the next piece of work without being asked.
Clear writer:
You turn complex legal points into practical advice.
Comfortable with change:
A growth mindset and ease with uncertainty.
Nice to have: experience with SaaS, healthtech, fintech or AI businesses; familiarity with ISO 27001 or SOC 2; CIPP/E, CIPM or equivalent.
What’s in it for you
A percentage of revenue from new business you help win.
Strategic, DPO-level work and ownership of client relationships.
Close collaboration with an experienced DPO.
Fast pace, rewarding work with generation-defining companies.
Apply now
Assenteo is an equal opportunity employer, and we welcome applicants from all backgrounds.
