Compliance Generalist

At Nortal, we believe complexity doesn't have to mean complicated. That mindset shapes the way we approach compliance, too. As technology evolves and regulation grows more complex, the challenge isn't just understanding the rules1it's turning them into practical ways of working that help the business move forward

That's what makes this opportunity different. Rather than focusing on a single area, you'll work across AI governance, data protection, regulatory change, and emerging legislation. This means no two challenges are quite the same.

If you enjoy connecting the dots, solving complex problems, and learning something new every week, keep reading.

• Maintain the AI governance operating model for the Nortal Group, including the structures, processes, and accountability frameworks for managing AI-related risks and compliance.
• Lead the interpretation and implementation of AI regulations, particularly the EU AI Act, translating requirements into internal guidance and governance standards.
• Drive collaboration across legal, compliance, information security, product, and business teams to embed AI governance principles into day-to-day operations.
• Provide GDPR support, including evaluating software approval requests, managing data breach and notification processes, handling data subject rights, and maintaining GDPR registers.
• Lead the regulatory monitoring function, tracking legislative developments and emerging compliance obligations.
• Support the compliance risk programme, including policy management, due diligence, internal audits, investigations (including whistleblowing cases), and conflict of interest processes.
• Deliver and coordinate AI and compliance training across the organisation.

• At least 5 years of experience in a compliance, legal, or governance role, including work across international jurisdictions, ideally within a technology or professional services environment.
• Law degree (LLB, LLM, or equivalent), or a degree in a closely related field.
• Demonstrable knowledge of AI regulation (particularly the EU AI Act), GDPR and data protection principles, with hands-on experience in privacy operations and policy drafting.
• Strong regulatory interpretation skills, with the ability to translate complex regulatory frameworks into clear, practical guidance for the business.
• Excellent stakeholder management to collaborate across functions, including with legal, information security, HR, and business teams.
• Strong project management skills to drive global regulatory monitoring and risk management.
• Fluency in English, additional European languages are a plus.

• We hire people not only for their skills but also for cultural add.
• We live by our values: commit to delivering value and results, take ownership, empower yourself and others, and own your future and growth.
• Besides our professionalism, we like to spice things up with good humor.
• We care about your growth & development.
• In Nortal we support constant improvement and knowledge sharing via Learning Hives, external and internal training, dedicated time for self-learning, a mentorship program, and strong 1:1 culture.
• We prioritize your health & well-being by providing a flexible package for health insurance and sports initiatives.
• We support your work-life balance and provide flexible working hours.
• You have the option to work remotely within Estonia or in a hybrid setup from our Tallinn or Tartu office.