Privacy & compliance specialist
Pubblicato il 25-10-2026 - InPost Italy in Italia
In Post is a leading player in the business to consumer parcel delivery market. In Poland, they are successfully redesigning the last mile for e-commerce as the market leader. In Post covers the Italian market with a network of 5000 PUDOs (Pick Up and Drop Off points) and 5000 fully automated parcel lockers (that are accessible 24/7) enabling customers to collect, send and return parcels at their earliest convenience.
The aim is to continue scaling In Post in the Italian market in a similarly rapid trajectory to that of Integer's Polish home market. We're passionate about our mission and products and our People are the reason we succeed. We're looking for people with drive and curiosity, who will join us in re-writing the norm Job Overview: We are looking for a senior professional with solid in-house experience and a strong business-oriented mindset, primarily focusing on privacy and compliance matters.
The successful candidate will join a Legal Department that acts as a true business partner to the company's functions, helping translate regulatory and control requirements into practical, sustainable solutions aligned with the Company's objectives. In this context, in addition to overseeing privacy and compliance matters, the candidate will support the Legal team on broader and more general legal activities, including contract review and participation in cross-functional projects involving multiple departments.
We are seeking a professional who can manage assigned responsibilities with a high degree of autonomy, accountability, and prioritization skills, while ensuring ongoing alignment and coordination with the General Counsel.
The successful candidate will be responsible for supporting the Company in ensuring compliance with personal data protection regulations (particularly the GDPR and applicable Italian legislation), as well as other regulations relevant to the business. The role involves working closely with various departments across the organization and reporting directly to the General Counsel.
Key Responsibilities
Privacy Support the implementation and maintenance of a compliance program in line with the GDPR and other applicable privacy regulations. Monitor developments in data protection laws, regulations, and best practices. Conduct Data Protection Impact Assessments (DPIAs). Manage and respond to data subject rights requests, including requests for access, rectification, erasure, and data portability.
Maintain and update records of processing activities (Ro PA). Cooperate with the external Data Protection Officer (DPO). Manage data breaches in collaboration with the General Counsel, including the completion of ENISA risk assessments and notifications to the relevant authorities and affected data subjects where required.
Compliance Manage an effective compliance program based on Italian and EU legislation (e.g., Legislative Decree 231/2001, whistleblowing regulations, anti-corruption laws, etc.), industry-specific regulations (postal services and logistics), and Group policies. Monitor regulatory developments and compliance best practices relevant to the Company, assess the impact of legislative changes on business operations,
and develop plans to ensure ongoing compliance.
Maintain and update the Company's Legislative Decree 231/2001 Organizational, Management and Control Model. Support the General Counsel in the management of whistleblowing reports and investigations. Training and Awareness Develop and deliver periodic privacy and compliance training and awareness programs for employees. Create tailored guidance materials, communications, and practical tools to promote privacy and compliance awareness across the organization as needed.
Legal Support and Collaboration Provide legal advice and support to various business functions on privacy and compliance matters, as well as on broader legal and cross-functional topics, adopting a strongly business-oriented approach. Review and ensure that customer and supplier agreements include appropriate data protection and compliance provisions.
Manage and respond to periodic information requests from regulatory authorities (e.g., the Italian Data Protection Authority and AGCOM), and support the General Counsel in interactions with such authorities and with the Supervisory Body (Organismo di Vigilanza). Support internal investigations relating to potential privacy and compliance breaches.
Key
Skills:
Qualifications and Skills Law degree. Qualified Attorney-at-Law (preferred) with prior in-house legal experience. At least 10 years of experience in privacy and compliance roles, preferably within the postal services or logistics industry. Demonstrated and certified expertise in GDPR compliance, Italian data protection legislation, NIS2, Legislative Decree 231/2001, whistleblowing regulations, and anti-money laundering (AML) requirements. Strong understanding of informati