Our partner is looking for a Senior Counsel, Data Privacy & AI based in Spain. This is an opportunity to shape how data privacy, governance, and responsible artificial intelligence are embedded into a global employment technology platform.

As Senior

Counsel, you will provide strategic legal guidance across privacy, data protection, and AI governance, helping teams innovate while maintaining customer trust and regulatory compliance. The role combines sophisticated legal analysis, commercial negotiations, and practical risk management in a fast-growing, internationally distributed business. You will translate evolving global regulations into clear policies, scalable frameworks, and actionable guidance that enables teams to make confident decisions.

Your expertise will support products and services spanning integral employment, payroll, contractor management, and workforce mobility, where sensitive personal data requires careful handling. This is an ideal opportunity for a commercially minded legal professional who thrives at the intersection of technology, emerging AI regulation, and international data protection.

Global privacy and AI legal leadership: Serve as the primary legal advisor on data privacy, data protection, and AI matters affecting the platform, internal operations, product development, and commercial initiatives across multiple jurisdictions. Partner with Product and Engineering teams from initial ideation through launch to embed privacy-by-design principles, responsible AI practices, and proportionate risk controls into product features and operational workflows. Translate complex legal and regulatory requirements into clear product guidance, internal policies, review frameworks, checklists, and decision-making standards that enable teams to operate confidently and consistently.

Support enterprise-wide AI governance, including use-case assessments, risk classification, documentation, transparency, human oversight, model and data governance, incident response, and the development of appropriate policies and controls.

Privacy assessments and operational compliance: Lead or support Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), Transfer Impact Assessments (TIAs), data mapping, retention reviews, vendor assessments, international transfer evaluations, and other core privacy operations.

Commercial contracting and negotiations: Draft, review, and negotiate privacy- and AI-related contractual provisions, including Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), data-use terms, product agreements, vendor provisions, and customer commitments.

Workforce data protection:



Advise on privacy and data protection issues across global employment, employer-of-record (EOR), payroll, contractor, professional employer organization (PEO), and workforce mobility services, considering the complexities of cross-border employee and contractor data processing. Collaborate with Security, IT, and relevant business teams to assess privacy incidents, determine notification obligations, support regulatory reporting, coordinate remediation, and incorporate lessons learned into future controls. Prepare and review customer-facing and auditor-facing materials, including privacy questionnaires, AI governance statements, compliance documentation, trust materials, and internal operational playbooks.

Regulatory monitoring and strategic advice: Track developments in global privacy legislation and emerging AI regulation, translating new requirements into actionable business positions, risk assessments, and implementation priorities.

Scalable compliance processes: Develop reusable templates, training materials, legal operations workflows, and governance processes that strengthen organizational privacy and AI maturity as the business expands. Build trusted relationships across legal, technical, commercial, and operational teams, balancing regulatory obligations with customer expectations, business priorities, and the pace of product innovation.

Strong privacy law expertise: Extensive knowledge of core data protection frameworks, particularly the General Data Protection Regulation (GDPR), international data transfers, controller and processor assessments, vendor governance, data subject rights, retention requirements, and incident response.

AI legal and governance experience: Meaningful experience advising on AI-powered products, AI governance frameworks, or emerging AI regulations, with the ability to navigate legal uncertainty and develop practical, risk-based operating guidance.

Legal qualifications and experience: A recognized legal qualification and substantial experience in privacy, data protection, technology law, or a closely related field, with the ability to advise independently on complex legal and commercial matters. Commercial and product-oriented judgment: A commercially pragmatic approach to legal counseling, with the ability to balance regulatory risk, customer trust, operational realities,



and business growth without unnecessarily slowing innovation.

Experience in HR technology, payroll, EOR, PEO, workforce management, fintech, or another highly regulated B2B SaaS environment is strongly valued.

Workforce data expertise: Familiarity with employee and contractor data protection across onboarding, payroll, benefits administration, international mobility, offboarding, and cross-border employment operations.

Contract drafting and negotiation: Strong drafting and negotiation skills across data protection agreements, technology contracts, privacy provisions, AI-related terms, and international data transfer arrangements. Ability to evaluate AI use cases, assess risks, establish appropriate oversight mechanisms, and advise on transparency, documentation, data governance, and accountability.

Privacy operations and legal technology: Experience with privacy management tools, data discovery solutions, contract lifecycle management platforms, or structured legal operations and compliance workflows. Excellent written and verbal communication skills, particularly the ability to explain complex legal concepts clearly to non-lawyers and influence decisions across multidisciplinary teams. A proactive approach to monitoring regulatory developments, improving compliance processes, and helping teams adapt to evolving technology and legal requirements.

The ability to work effectively with colleagues from diverse professional, cultural, and geographic backgrounds while fostering an open, collaborative environment.

Remote working flexibility: Work remotely from Europe within an internationally distributed organization.

Strategic legal ownership: Take a leading role in shaping privacy, data governance, and responsible AI practices across a global technology platform. Partner with Product, Engineering, Security, IT, and commercial teams to influence decisions throughout the product lifecycle. Work at the intersection of data protection, AI governance, global employment technology, and evolving regulatory frameworks.

Professional development: Expand your expertise in global privacy regulation, emerging AI requirements, technology contracting, and scalable compliance operations. Establish frameworks, tools, and policies that strengthen legal and compliance capabilities as the business grows.

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).

📌 Senior Counsel, Data Privacy & AI (Madrid)
🏢 Jobgether
📍 Madrid