About the Role

This role owns the end-to-end compliance lifecycle at Cloud Office. You will manage legal compliance operations, handle all customer and vendor contracting flows, oversee DPAs, maintain our Terms of Service, enable regulatory alignment (GDPR, NIS2, SOC 2 requirements), support DORA-related customer obligations, and integrate compliance practices across the company. This is a hands-on role combining legal operations, regulatory compliance, contracting governance, and internal process management.

‍

What you'll do

Contracting & Legal Documentation

• Draft, review, and manage:
• Customer agreements
• DPAs and GDPR addendums
• Sub-processor notifications
• Terms of Service, Acceptable Use Statements, Privacy Policies
• Partner and reseller agreements
• Maintain contract templates and versioning across Cloud Office entities (BG, GR, UK).
• Ensure all contracts meet GDPR, NIS2, DORA-lite, and industry expectations.
• Support the sales team with contract redlines, customer negotiations, and procurement questionnaires.

Compliance Operations & Governance

• Maintain the compliance framework and ensure policies are annually reviewed and updated.
• Own the compliance calendar (audits, DR tests, annual reviews, training deadlines).
• Keep the Register of Regulations (RoR) updated with applicable laws, obligations, and evidence.
• Coordinate with the SOC/security team on evidence review, policy updates, and customer assurance requests.
• Conduct compliance onboarding for new internal processes (AI usage, data handling, vendor adoption).

Data Protection & Privacy

• Manage GDPR compliance activities: DPIAs, DTIA assessments, ROPA updates; DSAR workflow and SLA tracking; Privacy-by-design integration across internal tools
• Act as internal advisor on data protection questions, ensuring all teams follow the framework.
• Coordinate with external counsel when necessary.

Vendor Onboarding & Offboarding

• Run the vendor risk assessment process: Collect and evaluate SOC2/ISO certificates; Security & privacy questionnaires; DPA and contract compliance.
• Maintain an up-to-date vendor inventory and subprocessor list.
• Oversee offboarding: termination of access, data deletion verification, and audit trail.

Policy, ToS & AUS Management

• Own and maintain: Terms of Service; Acceptable Use Statements; Privacy policy; Internal compliance policies.
• Ensure documents are consistent across websites, portals, contracting, and marketing materials.
• Coordinate public updates and customer notifications.

Audit & Evidence Support

• Support SOC 2, ISO 27001 alignment activities, and customer audits.
• Prepare evidence, documentation packs, and responses to RFP compliance sections.
• Work closely with tech teams to gather access reviews, training logs, vendor documentation, and DR evidence.

Cross-Company Compliance Integration

• Work with Engineering, Support, Sales, and HR to embed compliance into everyday operations.
• Monitor new tools and automation projects to ensure they meet GDPR/NIS2 requirements.
• Train internal teams on privacy, compliance, and contractual obligations.

Commercial Legal Advisory

• Advise internal teams on day-to-day commercial legal matters and contractual obligations.
• Provide clear, practical legal guidance to support sales, procurement, and operational activities.
• Work closely with sales, finance and leadership teams to support business initiatives.
• Act as a trusted legal partner, translating legal concepts into business-friendly advice.
• Coordinate with external counsel when required.
  

What we're looking for

• Law degree. Qualification to practice law in the relevant jurisdiction is a plus.
• Strong understanding of GDPR, privacy compliance, and data processing obligations.
• Experience reviewing contracts, DPAs, and ToS/AUS content.
• Familiarity with SaaS business models, cloud providers, and vendor management.
• Ability to analyse regulations and translate them into internal processes.
• Excellent writing skills and ability to produce clear, high-quality documentation.
• Strong project management and organisational capabilities.
• Comfortable coordinating across teams and driving processes end-to-end.
  

Nice to Have

• Experience working with SOC 2, ISO, NIS2, DORA, AML/KYC, or other regulated frameworks.
• Previous experience in a SaaS company or cloud services provider.
• Experience supporting customer RFPs, vendor questionnaires, or compliance reviews.

Role Impact

This role acts as the backbone of Cloud Office’s legal and compliance function.

You will make sure that:

• all contracts flow smoothly,
• DPAs are airtight,
• compliance is predictable and evidence-backed,
• vendors are safe,
• customers receive high-quality assurance,
• and Cloud Office meets the expectations of banks, enterprises, public sector, and partners.