Senior Regulatory Counsel (m/f)

As our Senior Regulatory Counsel, you’ll work where law, technology, and business meet. You’ll be involved early, while products are still taking shape, turning complex regulation into practical solutions that support Aircash's growth. Your focus will be data protection, consumer protection, digital regulation, and emerging frameworks, with plenty of variety across our wider legal and regulatory work. This is a hands-on senior role with real autonomy and direct impact on how regulation is built into everything we do. Key Responsibilities: - Advise on legal and regulatory matters relating to new technologies and digital services, including the AI Act regulation, data protection (GDPR), consumer protection, and other emerging regulatory requirements - Take a senior role in managing and continuously improving the framework, ensuring effective implementation across products, services, business operations, and internal processes - Partner with Product, Technology, Information Security, and business teams from day one on new products, features, and partnerships - Identify legal and regulatory risks and propose proportionate safeguards that protect the business without slowing it down - Draft, review, and negotiate agreements, policies, and internal procedures - Support broader compliance matters, including financial services regulation - Stay ahead of regulatory developments and lead their implementation - Work with external counsel on complex or specialized regulatory matters - Act as a trusted internal advisor, providing clear, practical, and commercially sound legal guidance to stakeholders across the organization

- A university degree and at least 7 years of relevant professional experience - Experience in the payments, banking or broader regulated services industry - Familiarity with the EU regulatory framework - Experience with privacy-by-design principles or technology-related regulatory projects. - Practical experience with data protection, consumer protection and digital regulation, including GDPR, with experience in operational resilience (NIS2/DORA), the EU AI Act or other technology-related regulatory frameworks considered an advantage. Advantage: Relevant professional certifications in data protection, privacy management or digital regulation, such as CIPP/E, CIPM, CIPT or AIGP (IAPP), or equivalent qualifications.