Compliance Manager

Brief Info About Vinted

Our mission is to make second‑hand the first choice, and we're looking for people who want to help us get there. Every day, we work together to help our members buy and sell pre‑loved clothing and lifestyle items, giving each piece a second life – or even a third.

Brief Info About Vinted

Our mission is to make second‑hand the first choice, and we're looking for people who want to help us get there. Every day, we work together to help our members buy and sell pre‑loved clothing and lifestyle items, giving each piece a second life – or even a third.

The Vinted Group is made up of three business units that support this mission: Vinted Marketplace is Europe’s leading platform for second‑hand fashion and a go‑to destination for all kinds of pre‑loved items, with a growing range of categories. Our platform connects millions of members across 20+ markets, helping great items find a new life. Vinted Go enhances the shipping experience with a vast network of over 500,000 pick‑up and drop‑off points, partnering with more than 60 carriers across Europe, with added services like item verification for peace of mind on high‑value pieces. Vinted Pay is the newest part of the Vinted Group, dedicated to bringing secure, reliable payments to buyers and sellers across Europe. Seamlessly integrated into the Vinted app, it helps keep every transaction safe, efficient, and easy for our members. Founded in 2008 in Lithuania, Vinted began as a way for friends to find new homes for clothes they no longer needed. In 2019, we became Lithuania's first unicorn Today, our headquarters remain in Vilnius, and we've grown with offices across Europe, supported by a team of over 2,000 people.

Information About The Position

Vinted is building out its compliance function for the EU Digital Services Act (DSA) and equivalent online safety regimes, including the UK Online Safety Act. These regimes run on a fixed calendar of public deliverables: transparency reports every six months, an annual systemic risk assessment, an annual independent audit, and a continuous feed of content moderation decisions to the Commission’s DSA Transparency Database.

In this position, you’ll

• Own the production calendar for every recurring public report under the DSA (Articles 15, 24 and 42) and land each one on its statutory deadline;
• Gather and reconcile the reported data with Content Moderation, Customer Support, Product and Data — moderation volumes and outcomes, notice-and-action and complaint figures, moderation headcount and language coverage, monthly active recipients per Member State — and produce the first complete draft of each report in the Commission’s harmonised templates (Implementing Regulation (EU) 2024/2835);
• Interrogate the numbers before anyone outside sees them: reconcile to source, explain movements between periods, challenge the owning team where a figure does not hold up;
• Run the annual independent audit day to day as point of contact for the auditor appointed under Article 37 — information requests, walkthroughs, evidence packs, factual accuracy reviews — under the direction of the Head of the Compliance Function;
• Convert audit findings into a tracked remediation plan, chase it to closure, and produce the audit implementation report under Article 37(6) and the public package under Article 42(4);
• Build and maintain the obligation register and control library — each duty mapped to its owner, its control and its evidence — and run periodic control testing with Risk Management and Internal Audit & Control;
• Run the operational side of the annual risk assessment under Articles 34 and 35 and draft responses to requests for information from the Commission, the Digital Services Coordinator and other regulators.

About You

• At least 4 years in regulatory compliance, audit, regulatory reporting or GRC, where you personally produced deliverables that went to a regulator or an external auditor;
• Working knowledge of the DSA, in particular Articles 15, 24, 34–37, 41 and 42; UK Online Safety Act or comparable regimes a strong plus;
• You do not need to be a qualified lawyer — a legal qualification is welcome but not required;
• Demonstrated ownership of a recurring reporting cycle from data collection to publication, against non-negotiable external deadlines;
• Comfortable with data: able to interrogate operational datasets, spot a wrong figure and resolve it with the source team. Strong Excel; SQL an advantage;
• Auditor- or regulator-facing experience: evidence packs, information requests, findings managed to closure, and precise written English for documents that are published;
• Able to get deliverables out of senior stakeholders you have no authority over, and to escalation early when one is slipping.

Work perks

• The opportunity to benef