Data Protection Officer

About the company

Pomelo builds financial technology for card issuance, processing, and business management across Latin America. The company develops world-class financial infrastructure that helps businesses launch credit, debit, or prepaid cards quickly, securely, and with high compliance standards. Its cloud-based platform and API integrations make it easier for customers to replace legacy systems and scale across the region.

With a team of more than 250 people, Pomelo is continuing to grow through 2026 and is expanding its regional opportunities.

Building Better Cards! 💳

Role overview

The InfraSec team is hiring a Data Protection Officer to lead Pomelo’s regional personal data protection agenda. This role is responsible for ensuring compliance across the countries where the company operates and turning regulatory requirements into practical guidance for internal teams.

Key responsibilities

• Drive the regional privacy strategy across Argentina, Brazil, Chile, Colombia, Mexico, and Peru, translating legal obligations into clear operational standards.
• Own privacy policies, privacy notices, and data subject rights processes, while Legal drafts the documents and InfoSec develops the tools.
• Define how personal data is collected, used, safeguarded, and deleted, including consent handling, in partnership with Product, Legal, and InfoSec.
• Participate in project design from the start using Privacy by Design and Privacy by Default principles.
• Review privacy risks for new initiatives through DPIAs and privacy assessments, supported by technical input from InfoSec and regulatory guidance from Legal.
• Approve international data transfers and privacy requirements in third-party contracts, which Legal prepares and negotiates.
• Coordinate responses to personal data incidents, including technical remediation, legal notifications, and final decision-making.
• Promote a company-wide privacy culture through audits, training, and adoption of best practices.
• Interpret personal data protection rules in each jurisdiction and convert them into actionable internal criteria.
• Lead and approve Privacy Impact Assessments for high-risk projects.
• Advise on personal data incident handling and determine when regulatory notifications are required.
• Set minimum privacy standards for third-party agreements such as Data Processing Agreements.
• Serve as the formal contact point for data protection authorities.

Requirements

• More than 5 years of experience leading personal data protection, privacy, or compliance programs, ideally in technology, fintech, or highly regulated environments.
• Hands-on experience implementing privacy programs aligned with GDPR, LGPD, and other Latin American data protection regulations.
• Strong understanding of Privacy by Design, Privacy by Default, DPIAs, privacy incident management, and international data transfers.
• Background creating privacy policies, processes, and controls while working across Legal, Information Security, Product, and Technology teams.
• Ability to interpret complex regulation and convert it into clear, practical, and scalable guidance for different teams.
• Experience dealing with regulatory authorities and advising on reporting and compliance obligations related to data protection.
• Analytical profile with the ability to identify risks, prioritize initiatives, and continuously improve privacy and data governance processes.

Why join Pomelo

• Work in an innovative company that is constantly evolving and helping shape the future of financial technology.
• Collaborate with talented professionals across Latin America and learn from regional challenges and perspectives.
• Contribute to meaningful work with visible impact across the region and a fast-moving industry.
• Grow through a practical, hands-on culture where learning happens by doing.
• Benefit from a flexible hybrid model designed to support the way you work best.

Additional information

Pomelo highlights that it has many open positions during 2026 and invites candidates who want to join the team and become part of its culture. The company emphasizes teamwork, regional collaboration, continuous learning, and flexibility.