Group Privacy Officer

About the role

Aceve, a Nordic-founded SaaS company building digital tools for electricians, plumbers and contractors, is hiring a Group Privacy Officer in Stockholm. The role builds the privacy framework from the ground up, reporting to the General Counsel and harmonising practice across group companies in Europe and the UK. It suits someone who has done this before and wants to shape how a fast-scaling, multi-national business handles data and AI.

Key responsibilities

• Build and maintain the privacy framework, including the Group Record of Processing Activities, the DPIA methodology and DPAs across every entity
• Be the first point of contact for local entities on privacy questions and give clear, workable answers
• Ensure AI and ML use complies with GDPR and the EU AI Act, and use AI tools such as Claude or Copilot to speed up DPIA and DPA work
• Track privacy work across entities, spot gaps and escalate the risks that matter
• Run ongoing privacy training and awareness across Group companies
• Own and refine the breach response process so local entities can meet statutory deadlines
• Run privacy assessments on new systems, tools and vendors and follow up with IT, HR and vendors

Required profile

• 8+ years of senior privacy experience across a multi-entity, multi-jurisdiction organisation, ideally spanning the UK and EU
• Proven track record of setting up privacy programmes and harmonising practice across companies at different maturity levels
• Ability to earn trust with Engineering, Product and Commercial teams while staying consistent under pressure
• Comfortable briefing leadership on strategy and reviewing DPIAs line by line with engineers
• No fixed background required; privacy professionals and lawyers are both welcome

Required skills

• Hands-on experience with RoPA, DPIAs, data flows and vendor privacy assessments
• Practical, confident use of AI tools in daily work
• Bonus points: a formal privacy qualification (CIPP/E, CIPM or similar) or legal training, experience in a PE or VC-backed scale-up, and experience presenting privacy strategy to a board or executive team