Legal Compliance Expert (Background in Tech | Remote)

🧬 About us

We’re iubenda, the team turning compliance into a growth engine. We help over 110K businesses all around the world build trust, boost performance, and grow without limits. Now part of team.blue (https://team.blue/), we’re scaling privacy tech with confidence, creativity, and a little bit of attitude. Join a team that moves fast, thinks big, and makes privacy feel exciting again!


🎯 Mission & Core Purpose

We're looking for a Legal Compliance Expert with a background in the Tech industry to join the iubenda Legal Team and help us scale our privacy-first products globally. You will report to the Head of Legal and work across three brands (iubenda, Complianz, consentmanager) as well as contribute to group-level work for our parent company, team.blue NV. The role is roughly equally divided between classical legal work (research, drafting, advice) and forward-looking work at the intersection of law and technology - including helping our engineering and product teams build AI-assisted legal flows and - over time - contributing to agentic legal tooling.


💼 Key Responsibilities

- Internal Compliance:

• Provide structured legal advice to Product and Engineering on a broad range of requests;

• Support and maintain ISO certification processes (ISO 27001 or equivalent) - including gap analysis, audit preparation, and keeping internal documentation current;

• Research, track, and synthesise regulatory developments - primarily EU digital law (GDPR, ePrivacy, DSA, Data Act, AI Act) and their equivalents in key non-EU jurisdictions;

• Draft and review DPAs, inter-company contracts, and policy documents;

• Manage or coordinate data subject rights workflows across brands and jurisdictions.
  

- Tech-facing legal work:

• Collaborate with product and engineering teams to translate regulatory requirements into actionable technical specifications;

• Contribute to the design and review of AI-assisted legal features within our products - including consent logic, legal basis mapping, and automated compliance flows;

• Over time, help build and validate legal reasoning components that can be integrated into product pipelines;

• Evaluate new product features and third-party integrations from a privacy and regulatory standpoint before launch.

👤 Your Profile

You have a genuine curiosity for regulatory texts and the technical rigor to turn them into clear, actionable legal analysis. You're equally comfortable writing a compliance memo and sitting with a product manager to explain what it means for the roadmap. You're pragmatic about risk — neither reckless nor paralysed by caution. You find the question "what does this regulation actually require, technically?" more interesting than "what is the safest thing to say." You have strong opinions about how AI is changing legal practice, and you want to shape that change from the inside, not watch it from a distance.


💡 Experience & Skills

• Master's degree in law (any jurisdiction; EU training preferred but not required);

• At least 3 years of post-qualification experience in a role with significant privacy or data protection scope;

• Demonstrable hands-on experience with GDPR - not just familiarity, but actual drafting, advising, or compliance implementation;

• Experience with ISO 27001 or a comparable information security certification framework: at minimum, participation in audits or maintenance; ideally, ownership of the process;

• Genuine comfort working in and for a technology company - you understand what an API is, you are not intimidated by a product specification, and you find the legal-technology interface interesting rather than inconvenient.

• Full professional proficiency in English and Italian (our primary working language); strong written communication is non-negotiable;

- Added Values:

• Experience advising on or implementing AI-related compliance (AI Act readiness, algorithmic impact assessments, AI governance frameworks);

• Prior involvement in building or specifying legal-technology products - rules engines, automated notice generation, consent management platforms, or similar;

• Familiarity with prompt engineering, LLM behaviour, or agentic AI systems - even at an exploratory or personal-project level;

• ePrivacy expertise: cookie consent, tracking, the consent-as-a-service ecosystem, or cross-device identity;

• Experience working across multiple EU jurisdictions or with non-EU privacy regimes (UK GDPR, Swiss nDSG, LGPD, CCPA/CPRA);

• Admission to the bar in any EU jurisdiction;

• Proficiency in additional European languages.

 🌐 Location

At iubenda we believe in full-remote. You are free to work from anywhere in the world. If you prefer a hybrid model, you can work from one of our offices in Milan or Bologna.


🎁 Benefits

• Remote work 🌴 Work 100% remotely, or from our offices, whatever works best for you. We are fully structured for seamless remote onboarding and collaboration.

• Company retreats & coworking gatherings 🏔️ Once a year, fully paid, week-long company or team retreat in beautiful locations such as Venice, Sicily, or the Dolomites to work, connect, and recharge together.

• All-in-One Flex Allowance 💳 A yearly allowance that you can tailor to your personal needs, whether it’s private health coverage, meal vouchers, childcare, learning, fitness, or other lifestyle choices. You can invest in what matters most to you.

• Work equipment 💻 An equipment allowance to help you create the perfect setup and perform at your best.

• Collaborative, multicultural team 🧩 Join a team of talented, international colleagues in a friendly, open, and highly collaborative environment.
  
  
  Please send your CV in English.
  Want to know more about iubenda? Check us out at:
  iubenda.com | LinkedIn | Facebook  |Twitter
  
  Privacy
  By applying, you hereby declare that you have read and understood our privacy policy (https://www.iubenda.com/privacy-policy/96274994). To ensure a fair selection process and verify your identity, we may ask you during video interviews to disable virtual backgrounds or filters, show an ID, or answer follow-up questions. If you need an alternative arrangement, please let us know, and we will accommodate.