This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Junior Legal Counsel, AI & GDPR based in Italy.
This role offers the opportunity to work at the intersection of data protection, artificial intelligence, and international business operations.
You will support a global privacy and AI governance program, helping translate complex regulations into practical, business-focused guidance.
Your work will span GDPR operations, contractual privacy matters, data subject requests, and emerging AI regulation.
You will collaborate closely with legal colleagues and specialized teams across a distributed, international organization.
The role combines independent ownership with frequent cross-functional collaboration and exposure to diverse legal and regulatory questions.
You will monitor developments such as the EU AI Act, EDPB guidance, GDPR case law, and national privacy requirements.
It is an opportunity to build specialist expertise while contributing directly to responsible data and AI governance in a fast-moving environment.
Accountabilities:
- Manage day-to-day GDPR operations, including drafting and negotiating Data Processing Agreements and Standard Contractual Clauses with international vendors and clients.
- Conduct privacy reviews of vendors and help maintain accurate records of processing activities and privacy notices across multiple jurisdictions.
- Support the ongoing development and implementation of AI governance practices, including readiness for evolving EU AI Act requirements.
- Handle data subject requests in accordance with applicable data protection requirements and internal processes.
- Support operational teams and clients by explaining relevant legal and privacy frameworks in clear, practical terms.
- Research and monitor developments in GDPR, the EU AI Act, EDPB guidance, case law, and national privacy requirements.
- Translate new regulatory developments into actionable guidance and practical recommendations for internal stakeholders.
- Collaborate with legal colleagues and specialized teams to ensure privacy and AI governance processes remain aligned with broader business objectives.
Requirements:
- Law degree or equivalent legal qualification.
- 1–2 years of hands-on data protection experience gained in-house, in a law firm, or in a consultancy environment.
- Practical working knowledge of the GDPR and its application in an international business context.
- Genuine interest in artificial intelligence regulation and emerging technology law.
- Strong legal research and analytical skills, with the ability to quickly understand new guidance and case law and turn it into clear, actionable advice.
- Structured, pragmatic, and self-organized approach to work, with the ability to take ownership of topics independently.
- Comfortable working in a fast-paced, remote-first and internationally distributed environment.
- Business-fluent English with strong written and verbal communication skills.
- German or other additional language skills are advantageous.
- Privacy certification such as CIPP/E is a plus.
- Exposure to HR technology, SaaS, global employment/EOR services, or non-EU privacy regimes is beneficial.
Benefits:
- Competitive gross annual salary of €35,000–€45,000, depending on location, skills, and experience.
- Fully remote work within approximately +/- 2 hours of CET.
- Flexible WorkFlex program supporting location and working-time flexibility.
- Dedicated Well-Being Day to support rest and mental health.
- Subsidized gym memberships and support for physical well-being.
- Training and Development Allowance to support ongoing learning and professional growth.
- Annual team meetups to strengthen collaboration across the distributed team.
- Opportunity to work with an international team spanning multiple countries.
- Diverse and inclusive remote-first working environment.
- Benefits may vary depending on location and applicable local laws and regulations.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
