Legal Counsel (IT & Data Protection)

AMBOSS as a Legal Counsel specializing in IT and Data Protection. In this role, you will be the key link between regulatory requirements and day-to-day operations, providing clear and actionable guidance to product and engineering teams.

Responsibilities

• You will own data protection risk assessment, track international regulations, review and negotiate data processing agreements, and improve data protection operations.
• You will collaborate closely with the DPO, General Counsel, and the wider Legal team.
• Act as a trusted data protection advisor, providing clear and pragmatic recommendations to product and engineering teams.
• Own data protection risk assessment across systems and processes, identifying and prioritizing compliance risks.
• Review and negotiate data processing agreements, assessing new software and vendors to ensure compliance.
• A pragmatic interest in AI and legal technology, and ideally experience using these tools to work faster and more effectively

Requirements

• Prior experience working alongside engineering, product, and technical teams to translate complex legal, regulatory, and compliance requirements into actionable product features, technical specifications, and workflows
• Legal qualification (Diploma; 1st state exam, LLM or international equivalent)
• Strong working knowledge of GDPR and how to apply it pragmatically in a product environment
• Technical curiosity: you enjoy understanding how systems and data flows work

Benefits

• Enjoy a range of benefits, including 30 vacation days, a personal purpose day, and an attractive retirement plan.

Join

• At least 4 years of experience in IT law and data protection at a law firm or in-house, with a clear track record of giving practical, decision-ready advice to a diverse range of stakeholders
• Even if you don’t meet every single point in the job description, we still encourage you to apply. We’d love to hear from you!