Description

You will be a key player in building and scaling Bitso's global digital and privacy programme during a period of aggressive expansion and new product launches. You will work directly advising Product, Data Science, Information Security, Engineering and Legal teams on cutting-edge issues like AI governance, cross-border data flows, and privacy-by-design for financial products across Latin America.

Requirements

• Hold a law degree
• 2–3 years of experience in financial services, fintech, crypto, regulatory affairs, data protection or information law
• Proficient in both Spanish and English (written and spoken)
• Highly organized, detail-oriented, and capable of managing multiple regulatory calendars and deadlines across jurisdictions simultaneously
• Self-starter who thrives in remote-first, fast-paced environments and takes ownership of projects without needing close supervision

Responsibilities

• Support the day-to-day execution of Bitso's global AI and privacy compliance programme across multiple jurisdictions
• Implement privacy tools, review and respond to data subject rights requests (ARCO rights) on a daily basis
• Draft, review, and negotiate data processing agreements (DPAs) and privacy clauses with third-party vendors, partners, and business clients
• Prepare and maintain privacy notices and consent mechanisms in accordance with local laws
• Conduct and support data protection impact assessments (DPIAs) for new products, services, technologies, processes and M&A transactions
• Maintain and update PII inventories, data flow maps, and records of processing activities (ROPA)
• Monitor regulatory developments and update our matrix accordingly
• Advise Product, Information Security, Engineering, Data Science, and Marketing teams on privacy-by-design, AI implementations and product design
• Support incident response
• Assist with privacy training programmes
• Manage filings and updates to national data protection registries
• Liaise with regional legal teams and country managers to ensure coordinated privacy compliance across all entities
• Support privacy due diligence for mergers, acquisitions, and corporate projects