Company Overview

Holafly is a high-growth scale-up revolutionising how businesses and travellers connect to the internet abroad. Since 2018, we’ve empowered travellers in over 200 destinations worldwide with secure and reliable eSIM solutions. With a team of 600+ professionals across multiple countries, we are scaling globally to support travellers with seamless, unlimited data connectivity.

We’re not just connecting people—we’re enabling freedom and peace of mind, ensuring our users stay connected from the second they land, wherever their journey takes them.

The Role

As our Data Protection Officer and Global Privacy Operations Manager, you will be the ultimate guardian of our users' trust, architecting a world-class privacy framework that scales with our global expansion. You will bridge the gap between legal compliance and product innovation, ensuring Holafly remains a leader in data integrity.

Key Responsibilities

• Lead Global Compliance: Drive our GDPR and international data strategy across all jurisdictions, acting as the primary liaison with regulatory authorities.

• Embed Privacy by Design: Partner with Product and Engineering teams to integrate privacy-first principles into every new feature and service we launch.

• Mitigate Risk: Oversee high-impact Data Protection Impact Assessments (DPIAs) and maintain a robust Record of Processing Activities (ROPA).

• Govern Data Transfers: Secure our global footprint by managing international data transfer mechanisms and third-party processor oversight.

• Champion Privacy Culture: Design and deliver high-impact awareness campaigns that empower our 600+ employees to handle data with excellence.

• Incident Excellence: Lead the data breach response program, ensuring rapid investigation and transparent communication when it matters most.

Qualifications

• 5 + years of Expert knowledge of GDPR and Irish/EU data protection laws, with a proven track record in a DPO or lead privacy role.

• Strong ability to translate legal requirements into actionable business and technical strategies.

• Professional privacy certification (e.g., CIPP/E, CIPM) is highly preferred.

• Ability to work effectively in a global, remote-first team.

Good to have

• Experience working within high-growth tech or telecom environments, managing complex, cross-border data flows.

• Experience with UK GDPR or privacy frameworks in LATAM and Asian markets.

Benefits & Perks

• Opportunity to shape the privacy roadmap of a global scale-up.

• Inclusive, high-trust culture with a focus on continuous learning.

IMPORTANT: For this position, candidates must be based in Dublin, as it follows a hybrid work model with a requirement to attend the office twice per week.