Counsel, Privacy, AI & Data Protection

Arrow Electronics, Inc.

Neu-Isenburg

On-site

EUR 120,000 - 180,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Hybrid working 2-3 days in office

Capital-forming benefits

Company pension plan contribution

Childcare/kindergarten subsidy

Corporate fitness subsidy

Job summary

Arrow Electronics, Inc. is seeking a Counsel, Privacy, AI & Data Protection to guide privacy, cybersecurity, AI governance, and data protection programs globally.

The role partners with cross-functional teams to enable responsible innovation while ensuring compliance with GDPR and evolving privacy requirements. The position requires on-site presence in Germany and offers a hybrid work setup with comprehensive benefits.

Qualifications

JD from an accredited law school with active bar membership.
Minimum 5+ years of privacy, data protection, cybersecurity, and AI governance experience.
Hands-on experience building AI governance principles and documentation.
Ability to translate regulatory obligations into pragmatic business solutions.
Strong drafting and negotiation skills for data-related and technology agreements.

Responsibilities

Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs.
Advise on GDPR/compliance and privacy-by-design across products and operations.
Support incident response planning and investigations related to data practices.
Draft, review, and negotiate data protection and technology agreements.
Develop training, playbooks, and governance roadmaps for privacy and AI initiatives.

Skills

Privacy law expertise

AI governance experience

Data protection program management

Contract drafting & negotiation

Education

Juris Doctor (JD) and bar admission

Job description

Position:

Counsel, Privacy, AI & Data Protection

Job Description:

Arrow Electronics is a global provider of products, services, and solutions to industrial and commercial users of electronic components and enterprise computing solutions. Arrow Electronics guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2025 sales of $30.9 billion, Arrow develops technology solutions that improve business and daily life. The company maintains 228 locations worldwide with over 85 countries served.

A Fortune 154 company with 21,500 employees worldwide, Arrow brings technology solutions to a breadth of markets, including telecommunications, information systems, transportation, medical, industrial, and consumer electronics. Arrow provides specialized services and expertise across the entire product lifecycle. Arrow does this by connecting customers to the right technology at the right place, time, and price. Arrow provides extraordinary value to customers and suppliers - the best technology companies in the world - and connects them through the company's industry-leading services.

The Counsel, Privacy, AI & Data Protection serves as a strategic, pragmatic legal advisor guiding the company’s privacy, cybersecurity, AI governance, and enterprise data protection programs. This role partners closely with cross-functional teams to enable responsible innovation while ensuring compliance with evolving European, GDPR and global privacy and AI requirements.

This role requires on site presence; please be mindful of location when applying.

What you'll be doing?

AI Governance, Responsible AI & Emerging Technology

Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs, including risk-based reviews, internal controls, documentation, and oversight mechanisms (e.g., transparency, accountability, human oversight).
Monitor and interpret AI legal and regulatory developments, and develop internal guidance/training aligned to best practices, frameworks, and evolving global and U.S. state automated decision-making laws.
Partner with AI/Data teams to implement legal, technical, and operational requirements for AI solutions as regulations and enforcement evolve globally; support development/review of Responsible AI documentation.

Privacy & Data Protection Compliance (Global)

Advise on privacy and data protection laws and regulatory trends (e.g., GDPR, individual country requirements as applicable), and embed “privacy-by-design” into products and operations.
Lead and/or oversee privacy impact assessments and data protection impact assessments, and maintain core privacy program artifacts (e.g., records of processing, DPIAs/PIAs).
Partner with Marketing and digital teams on privacy requirements for cookies, pixels, SDKs, analytics/advertising technologies, and consent management practices.

Cybersecurity & Incident Response

Provide legal support for cybersecurity programs, including incident response planning and execution, investigations, audits, and regulatory inquiries related to data practices.
Advise on data management and security practices supporting infrastructure/software development and advanced analytics/AI use cases (financial services or other regulated environments as applicable).

Commercial Contracting, Vendor Diligence & Data/AI Agreements

Draft, review, and negotiate data protection agreements, vendor and technology contracts, and privacy provisions; support procurement and vendor management processes.
Conduct privacy and AI vendor diligence and governance reviews, including assessment of vendor controls and risk posture for data processing and AI capabilities.
Where relevant to the business model, advise on SaaS/platform legal issues related to content compliance, datasets, model documentation (e.g., model/data cards), licensing/IP considerations, and terms of use.

Program Development, Training & Stakeholder Enablement

Maintain and update internal privacy/data governance policies; create external/customer-facing privacy documentation (e.g., FAQs, data sheets) to support transparency and trust.
Drive training and awareness programs on privacy, cybersecurity, and AI governance; develop playbooks and practical guidance for cross-functional teams.
Shape and execute a forward-looking roadmap for privacy and AI initiatives to support business growth and product expansion.

What we're looking for:

Juris Doctor (JD) from an accredited law school and active bar membership (or ability to obtain/maintain as required).
5+ years of relevant legal experience with a strong focus on privacy, data protection, cybersecurity, and AI governance (law firm and/or in-house).
Hands-on experience building and operationalizing AI governance principles, controls, and documentation; comfort advising on AI/ML/LLMs and emerging AI regulation.
Demonstrated experience advising cross-functionally and translating regulatory obligations into pragmatic business solutions.
Strong drafting and negotiation skills for data-related and technology agreements, including vendor/customer contracting and privacy/security terms

Preferred Qualifications & Certifications

Deep knowledge of global privacy laws and familiarity with global privacy frameworks; experience supporting regulated or consumer-facing products.
Experience with GRC/compliance programs, audit support, and risk assessments (privacy/security/AI).
Familiarity with online advertising and tracking technologies and consent requirements (e.g., cookies/pixels/SDKs).

What We Offer: