Compliance Manager - Digital Services Act (DSA)

Vinted is building out its compliance function for the EU Digital Services Act (DSA) and equivalent online safety regimes, including the UK Online Safety Act. These regimes run on a fixed calendar of public deliverables: transparency reports every six months, an annual systemic risk assessment, an annual independent audit, and a continuous feed of content moderation decisions to the Commission’s DSA Transparency Database.

• Own the production calendar for every recurring public report under the DSA (Articles 15, 24 and 42) and equivalent regimes, and land each one on its statutory deadline;
• Gather and reconcile the reported data with Content Moderation, Customer Support, Product and Data — moderation volumes and outcomes, notice-and-action and complaint figures, moderation headcount and language coverage, monthly active recipients per Member State — and produce the first complete draft of each report in the Commission’s harmonised templates (Implementing Regulation (EU) 2024/2835);
• Interrogate the numbers before anyone outside sees them: reconcile to source, explain movements between periods, challenge the owning team where a figure does not hold up;
• Run the annual independent audit day to day as point of contact for the auditor appointed under Article 37 — information requests, walkthroughs, evidence packs, factual accuracy reviews — under the direction of the Head of the Compliance Function;
• Convert audit findings into a tracked remediation plan, chase it to closure, and produce the audit implementation report under Article 37(6) and the public package under Article 42(4);
• Build and maintain the obligation register and control library — each duty mapped to its owner, its control and its evidence — and run periodic control testing with Risk Management and Internal Audit & Control;
• Run the operational side of the annual risk assessment under Articles 34 and 35 and draft responses to requests for information from the Commission, the Digital Services Coordinator and other regulators.

• At least 4 years in regulatory compliance, audit, regulatory reporting or GRC, where you personally produced deliverables that went to a regulator or an external auditor;
• Working knowledge of the DSA, in particular Articles 15, 24, 34–37, 41 and 42; UK Online Safety Act or comparable regimes a strong plus;
• You do not need to be a qualified lawyer — a legal qualification is welcome but not required;
• Demonstrated ownership of a recurring reporting cycle from data collection to publication, against non-negotiable external deadlines;
• Comfortable with data: able to interrogate operational datasets, spot a wrong figure and resolve it with the source team. Strong Excel; SQL an advantage;
• Auditor- or regulator-facing experience: evidence packs, information requests, findings managed to closure, and precise written English for documents that are published;
• Able to get deliverables out of senior stakeholders you have no authority over, and to escalate early when one is slipping.

• The opportunity to benefit from our share options programme
• 25 working days of holiday
• Access to all the tools & tech needed for work
• Home office support: we provide IT workstation equipment and a personal budget of up to €540 for home workplace furniture
• Private health insurance
• Pension plan with flexible contribution options and a matching contribution from Vinted
• Confidential Employee Assistance Program (EAP) for you and your family
• Frequent team-building events
• A personal monthly budget for shopping on Vinted
• A dog-friendly office
• In Vilnius office: gym & in-house meals at friendly prices
• In Kaunas office: a monthly lunch allowance, and a once-a-week provided in-house lunch and breakfast

Workation policy

Better balance holidays with workdays by working remotely! Up to 90 days per year in the EU, of these, 21 days can be spent globally. For non-EU citizens, it's 21 days worldwide. This can be combined with time off for vacation or personal time.

Individual learning budget

Each year, you’ll be given a learning budget (starting at €3,000), and a total of up to 10 working days over a 2-year period to support your personal and professional development.

Hybrid work

Our hybrid model, with 2 recommended office days a week, gives you and your team the flexibility to decide if and when you want to work from home, and when to catch up in person.

Equal opportunity

We welcome applications from everybody, regardless of your background, identity, or life experiences. Job openings come with guides, not checklists. If you’re excited about a role, but don’t identify with every point in the ‘About you’ section, apply anyway – you might still be the perfect match!