- H-1B median · Other
- $225k
- Opened · 30d
- +0
- Closed · 30d
- −0
- Opened · 7d
- +5,6938% of open
- All other
- 624,591open
About Addi
We are a leading financial platform, building the future of payments, shopping, and banking—a world where consumers and merchants can transact effortlessly and grow together. Today, we serve over 3.6 million customers and partner with more than 55,000 merchants, making Addi Colombia’s fastest-growing marketplace.
With a state-of-the-art, technology-first approach, we provide banking solutions (deposits, payments, unsecured credit) and commerce services (e-commerce, marketing), bridging the financial gap for millions and redefining how people experience financial freedom. As the country’s leading Buy Now, Pay Later provider, we have secured regulatory approval to operate as a bank, unlocking even greater opportunities for our customers. In the past year, we have also achieved profitability, reinforcing the strength of our business model and our ability to scale sustainably.
Our mission has earned the trust of world-class investors, including Andreessen Horowitz, Architect Capital, GIC, Goldman Sachs, Greycroft, Monashees, Notable Capital, Quona Capital, Union Square Ventures, Victory Park Capital, and more, who back our vision for the future. With their support, we are not just growing—we are transforming Latin America’s financial ecosystem and shaping the next generation to shop, pay, and bank in Colombia.
But what truly sets us apart is how we build. We are a conscious company, driven by deep experience in scaling technology, services and products, and we live by our values every day.
About the Role
This is where you come in. Below, you’ll find what this role is all about: the impact you’ll drive, the challenges you’ll tackle, and what it takes to thrive at Addi. If you’re ready to be part of something big, keep reading.
What’s the mission you’ll drive
Drive Addi’s privacy and AI governance, as Data Protection Officer and trusted partner to the General Counsel and Head of Legal, to keep Addi compliant with Colombian regulation and in good standing with the SIC and SFC, ensuring the business can use data and AI lawfully, quickly, and with confidence.
What you will do
Lead Addi’s privacy program across all of its entities. This includes assessing compliance against applicable regulations, defining priorities, and driving remediation.
Maintain a clear view of how personal data flows through the company, including legal bases, counterparties, and regulatory registrations. Keep it current as new products, entities, and funding structures appear.
Work with the Data and Cybersecurity teams to add a privacy layer to Addi’s data governance, covering data classification, legal basis for each use, retention, and data minimization.
Prepare and advise on incident response, including legal risk assessment, stakeholder coordination, and regulatory reporting.
Join product, alliance, and vendor discussions from the start. Review launches that touch personal data before go-live, in a way that helps the business move forward and doesn’t slow it down.
Negotiate and review data processing agreements and cross-border transfer terms with cloud and technology vendors.
Design and run an AI governance framework for both product AI (credit models, automated decisions, customer-facing agents) and internal AI tools. This covers use-case inventory, risk-based review, proportional approval paths, and rules for AI vendors.
Use AI tools to make legal and privacy work faster, for example to handle routine consultations and contract reviews, so you can focus on complex judgment calls.
Manage external advisors when you need extra or specialized capacity.
Represent Addi on privacy and AI matters before regulators, and take part in industry working groups and public consultations, including through Colombia Fintech.
What we’re looking for
Proven experience in Colombian data protection law and regulatory practice
Licensed lawyer with 10+ years of total legal/compliance experience, including at least 6 years specifically in data protection/privacy.
Direct experience interacting with the SIC (Superintendencia de Industria y Comercio) — filings, inquiries. Having worked at the SIC is a strong plus.