Compliance Manager (DPO)

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

Affirm’s EU Compliance team designs and implements a compliance program that proactively addresses regulatory requirements while also identifying potential compliance issues that may arise. Compliance program activities include advisory, training, testing & monitoring, reporting and oversight. Although a second line of defence, compliance partners with the business to support new products, markets, and initiatives, as well as issue identification, remediation plans and risk assessment. Compliance uses multiple data sources to enable informed decision making, strengthen controls and provide good outcomes for consumers.

As Affirm continues expanding across Europe, we’re seeking an experienced Regulatory Compliance Manager / Data Protection Officer (DPO) to strengthen Affirm B.V.’s governance and compliance frameworks. You’ll be responsible for building and maintaining a robust privacy and regulatory compliance program in line with EU and Dutch requirements, including GDPR. This remote-eligible role reports to the EU Compliance Director and will be registered as DPO with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). 

What You’ll Do

• Own and oversee the design, implementation and maintenance of Affirm’s EU Compliance & Privacy Framework, ensuring adherence to local regulatory requirements (eg. GDPR).

• Develop and maintain policies, procedures, and controls ensuring these are proportionate, risk-based, and aligned with Affirm’s global compliance standards. 

• Serve as Affirm B.V.’s registered Data Protection Officer, acting as the primary contact for the Dutch Data Protection Authority and managing regulatory notifications and reporting.

• Advise on compliance and privacy matters across functions including Product, Risk and Engineering, helping balance regulatory obligations with business objectives.

• Lead privacy governance, including Data Protection Impact Assessments (DPIAs), record-keeping, and privacy-by-design reviews.

• Support the development and execution of Affirm’s Compliance Monitoring Programme (CMP), ensuring alignment with the firm’s risk appetite and market context. 

• Drive awareness and accountability through training, communication, and proactive engagement across teams.

• Monitor regulatory developments and recommend updates to internal frameworks to maintain ongoing compliance readiness.

• Other duties as assigned.

What We Look For

• Experience: 

• 6+ years of experience in regulatory compliance and/or data protection, ideally within NL-regulated consumer credit / Buy Now Pay Later (BNPL), fintech or payments. 

  • Demonstrated experience building or managing a compliance or privacy program in a regulated environment.

  • Expertise: Advanced knowledge of applicable laws, regulations, requirements, best practices, and regulatory trends that impact Affirm’s business, including in relation to GDPR. 

• Skills: 

  • Subject matter expert in completing end-to-end compliance testing and/or assessment activities with limited oversight.

  • Advanced project management, critical thinking, and analytical skills. 

  • Excellent ability to collaborate cross-functionally and communicate complex regulations to functional leadership, while demonstrating strong organizational and relationship management skills with a detail-oriented and thorough approach.

  • Inquisitive and proactive in proposing creative and effective solutions.

• Mindset:

  • Proactive and innovative mindset with proven experience in leading initiatives and driving a culture of compliance within an organization.

  • A strong interest in fintech and consumer financial protections.

  • Fluent in English; Dutch language skills are a plus.

#LI-Remote