Legal Counsel – Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Implementation of operational data protection and IT compliance processes in alignment with GDPR, the AI Act, and US higher education standards such as HECVAT and SOC 2.

• Address security and privacy questionnaires, including HECVAT, VPAT/WCAG, and various security assessments.

• Engage in technical discussions with IT security representatives from universities and healthcare institutions.

• Develop a centralized Trust & Compliance knowledge repository, including a mechanism for regular updates.

• Maintain comprehensive records and registers, encompassing processing activities (VVT/ROPA), subprocessors, certificates, deletion policies, technical and organizational measures (TOMs), and incident logs.

• Manage data subject requests on an operational basis.

• Evaluate new IT and AI tools proposed by business units.

• Create a central contract repository and oversee both standard and customized agreements, DPA versions, and deviation analyses.

• Ensure DPA annexes are kept technically current.

• Develop scalable processes while utilizing AI and automation tools for document comparisons and drafting tasks.

• Collaborate closely with the Data Protection Officer (DPO), Chief Technology Officer (CTO), and Chief Privacy Officer (CPO).

⛳️ Requirements

• Approximately 3–5 years of experience in IT compliance, GRC, information security, privacy operations, or third-party risk, preferably in a SaaS/software environment.

• Proficient in responding to enterprise security questionnaires such as HECVAT, VSA, and SIG.

• Strong technical knowledge, including encryption, SSO, hosting, and backup solutions.

• Proficient in both German and English, with a minimum proficiency level of C1 in written and spoken forms.

• Experienced in the critical application of AI tools.

• Familiarity with automation tools like n8n or Zapier, and GRC platforms such as Vanta or Drata is advantageous.

• High level of independence and accountability.

• Strong skills in structured prioritization.

• Confident and professional when engaging with customers and IT stakeholders.

🏝️ Benefits

• Flexible working hours and the option for remote work.

• Complimentary access to the Lecturio learning platform for both personal and professional growth.

• Regular team-building and company events.

• Free refreshments and fruit available in the office.

• Complimentary access to coaching sessions and additional mental health support.