Support the development, implementation, and maintenance of data privacy and AI policies and procedures to ensure a responsible use of AI, protect personal data in Europe.
Track evolving global data privacy and AI laws (e.g., EU AI Act, OECD AI principles, US AI laws, UK DPDI) and translate requirements into actionable guidance.
Provide and organize expert legal advice and guidance on data privacy and AI use cases to internal stakeholders, including senior management, ERC, IT, and P&O.
Manage outside counsel for advice on data privacy and AI legal issues in Europe as needed.
Support the identification and mitigation of data privacy, AI and cybersecurity risks conducting regular assessments in close collaboration with DPDAI, IT and business teams.
Support the development and delivery of training programs to educate employees on data privacy and AI best practices and legal requirements.
Lead and support the legal response to, date privacy data breaches and AI-related incidents (including in cybersecurity incidents), ensuring timely and effective resolution.
Collaborate with cross-functional teams, including ERC, IT, security, P&O, Legal and business to ensure an integrated approach to data privacy and AI.
Requirements
University degree in law; admission to the bar highly preferred.
Proven working experience on data privacy, including in cybersecurity matters, AI (in particular in relation to the EU AI Act) and ethics in a multi-disciplinary and international setting.
Significant experience assessing AI systems from a legal and compliance perspective (including risk categorization, audit requirements, transparency obligations, and lifecycle governance).
Relevant certifications such as certifications related to AI ethics, compliance, and CIPP/E, CIPM are required.