This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
At Spotify, our mission is to unlock the potential of human creativity—by giving a million creative artists the opportunity to live off their art and billions of fans the chance to enjoy and be inspired by it. Legal Affairs sits at the heart of this mission, ensuring that Spotify meets its obligations under an evolving global regulatory landscape while championing user safety, transparency, and trust. Spotify’s Consumer, Competition, Markets & Regulatory (CCMR) team within Legal Affairs leads the company’s global approach to digital-platform regulation. We interpret, implement, and operationalize laws such as the EU Digital Markets Act (DMA), EU Digital Services Act (DSA), the UK Online Safety Act (UK OSA), the Australian Online Safety Act (AUS OSA), and similar frameworks worldwide. Working closely with Legal stakeholders, Trust & Safety, Public Policy, Product, Design, and Engineering, we design compliance programs that protect users and support Spotify’s strategic goals. You’ll be part of the team that translates global regulation into Spotify’s next-generation compliance strategy—balancing innovation, user trust, and responsible growth. If you thrive at the intersection of law, technology, and program design, and want to shape how Spotify meets the world’s evolving regulatory expectations, we’d love to hear from you.
Job Responsibility:
Drive the development and execution of Spotify’s cross-functional compliance programs under emerging digital-platform, content-regulation, and transparency laws
Build and manage regulatory readiness assessments, risk assessments, and implementation plans across multiple jurisdictions
Coordinate with product, legal, policy, and data teams to translate regulatory requirements into practical operational controls and reporting processes
Lead the documentation of compliance evidence, record-keeping, and audit trails for regulatory filings and responses
Support responses to regulatory requests for information (RFIs) and audits, ensuring timely, accurate, and consistent submissions
Develop internal training, playbooks, and communications to embed compliance awareness across business functions
Partner with Product and Trust & Safety to evaluate and monitor technical safeguards, content-moderation systems, and age-assurance mechanisms
Track legislative developments and advise leadership on evolving compliance expectations and risk exposure
Requirements:
6+ years’ experience in regulatory compliance, risk management, or legal program management in a global tech, digital-platform, or media environment
Experienced with online-platform regulation, such as the DMA, DSA, UK OSA, AUS OSA, COPPA, and comparable laws
Proven project-manager with the ability to coordinate complex, cross-functional programs with competing deadlines
Excellent communicator with experience briefing senior stakeholders and regulators
Able to translate complex regulatory obligations into clear business and technical actions
Skilled at building governance frameworks, metrics, and documentation to evidence compliance
Comfortable working across global time zones and cultures in a fast-paced, ambiguous environment
Compliance or risk certifications (CIPP/E, CCEP, etc.) or equivalent regulatory background preferred
consultant services experience and/or a law degree a plus
Nice to have:
Compliance or risk certifications (CIPP/E, CCEP, etc.) or equivalent regulatory background preferred
consultant services experience and/or a law degree a plus