Regulatory Operations Specialist
About the position At Spotify, our mission is to unlock the potential of human creativity—by giving a million creative artists the opportunity to live off their art and billions of fans the chance to enjoy and be inspired by it. Legal Affairs sits at the heart of this mission, ensuring that Spotify meets its obligations under an evolving global regulatory landscape while championing user safety, transparency, and trust. Spotify’s Consumer, Competition, Markets & Regulatory (CCMR) team within Legal Affairs leads the company’s global approach to digital-platform regulation. We interpret, implement, and operationalize laws such as the EU Digital Markets Act (DMA), EU Digital Services Act (DSA), the UK Online Safety Act (UK OSA), the Australian Online Safety Act (AUS OSA), and similar frameworks worldwide. Working closely with Legal stakeholders, Trust & Safety, Public Policy, Product, Design, and Engineering, we design compliance programs that protect users and support Spotify’s strategic goals. You’ll be part of the team that translates global regulation into Spotify’s next-generation compliance strategy—balancing innovation, user trust, and responsible growth. If you thrive at the intersection of law, technology, and program design, and want to shape how Spotify meets the world’s evolving regulatory expectations, we’d love to hear from you. Responsibilities • Drive the development and execution of Spotify’s cross-functional compliance programs under emerging digital-platform, content-regulation, and transparency laws (e.g., DMA, DSA, UK OSA, AUS OSA, US state platform laws). • Build and manage regulatory readiness assessments, risk assessments, and implementation plans across multiple jurisdictions. • Coordinate with product, legal, policy, and data teams to translate regulatory requirements into practical operational controls and reporting processes. • Lead the documentation of compliance evidence, record-keeping, and audit trails for regulatory filings and responses. • Support responses to regulatory requests for information (RFIs) and audits, ensuring timely, accurate, and consistent submissions. • Develop internal training, playbooks, and communications to embed compliance awareness across business functions. • Partner with Product and Trust & Safety to evaluate and monitor technical safeguards, content-moderation systems, and age-assurance mechanisms. • Track legislative developments and advise leadership on evolving compliance expectations and risk exposure. Requirements • You have 6+ years’ experience in regulatory compliance, risk management, or legal program management in a global tech, digital-platform, or media environment. • Experienced with online-platform regulation, such as the DMA, DSA, UK OSA, AUS OSA, COPPA, and comparable laws. • Proven project-manager with the ability to coordinate complex, cross-functional programs with competing deadlines. • Excellent communicator with experience briefing senior stakeholders and regulators. • Able to translate complex regulatory obligations into clear business and technical actions. • Skilled at building governance frameworks, metrics, and documentation to evidence compliance. • Comfortable working across global time zones and cultures in a fast-paced, ambiguous environment. Nice-to-haves • Compliance or risk certifications (CIPP/E, CCEP, etc.) or equivalent regulatory background preferred; consultant services experience and/or a law degree a plus. Benefits • health insurance • six month paid parental leave • 401(k) retirement plan • monthly meal allowance • 23 paid days off • 13 paid flexible holidays • paid sick leave Apply tot his job