To take our company to the next level, we are currently looking for a Risk and Compliance Senior Manager to join our Finance team: this position is an opportunity to shape innovation in the mental health industry, leading our solutions to make a global impact. We seek someone hungry to break barriers, fuel our global expansion, and transform the way we address mental health challenges in the world of work.
💻THE ROLE
We are looking for a Risk and Compliance Senior Manager to lead regulatory compliance initiatives across the company.
You will partner with product, marketing, clinical, and leadership teams, while coordinating with other departments (legal, finance, HR, operations) and external advisors (e.g., DPO, tax, legal) to ensure Unobravo meets industry standards and regulations (GDPR, marketing, European directives). You will define compliance priorities, balance local needs with our global product, and over time build a small team of experts.
Reporting directly to the CFO, this role offers a unique opportunity to shape and own our compliance framework, driving both strategy and execution to support safe, responsible growth.
You will be responsible for:
- Strategic Compliance Leadership: Define and implement a practical compliance framework across products, marketing, and infrastructure, balancing scale-up needs with risk management.
- Clinical Collaboration: Ensure compliance with healthcare regulations relevant to our role as a medical center.
- Compliance Management: Partner with product, marketing, and security to ensure GDPR, healthcare advertising, and NIS2 compliance. Provide strategic advice on privacy and health regulation, enabling Privacy by Design and Compliance by Design.
- Cross-functional Collaboration: Work closely with legal, IT, finance, HR, clinical, operations, and leadership to integrate compliance into all business decisions.
- Risk Management: Identify and mitigate risks across privacy, data, marketing, and communications. Lead DPIAs, LIAs, and other assessments.
- Global & Local Balance: Develop a compliance strategy that ensures our global product meets local regulatory requirements.
- Policies & Training: Create internal policies, deliver training, and build a culture of compliance and privacy awareness.
- Audit & Incident Response: Lead audits, monitor compliance, manage incidents, and oversee whistleblowing and reporting processes.
- Stakeholder Communication: Represent compliance priorities to leadership and advocate for key initiatives.
- Regulatory Monitoring: Track regulatory changes and best practices, updating company policies as needed.
⚙️YOU WILL BE THE PERFECT FIT IF YOU HAVE:
- 5+ years in senior compliance roles, with mandatory experience in a regulated market; healthcare sector (digital and/or physical) experience is a plus.
- Proven track record in fast-paced startups or scaleups, working closely with product and marketing teams.
- Strong knowledge of European regulations, including data protection, healthcare, digital marketing, and consumer protection.
- Ability to anticipate and address evolving AI regulations, ensuring training, compliance, and organisational readiness.
- Global or pan-European experience, with ability to balance local compliance needs with a worldwide strategy.
- Fluency in Italian and English, with international experience; presence in Italy is a strong advantage.
- Familiarity with compliance frameworks and best practices (e.g., ISO 27001, Legislative Decree 231/2001), though not required.
- Excellent communication skills to translate complex compliance topics into practical solutions for diverse stakeholders.
- Proactive and hands-on, able to balance strategic initiatives with operational needs.