Counsel, Privacy and AI Regulation (EU)

Cohere; España; Hybrid; EUR 150,000 - 220,000; Full time

Benefits offered by this job

Paid vacation 6 weeks

Parental leave top-up

Mental health budget

Global office access

Job summary

Cohere seeks a Counsel for Privacy and AI Regulation (EU) to shape compliance for foundation models across Europe. You will translate EU AI Act, GDPR, and DSA requirements into actionable engineering and product guidance.

Admission in an EU member state is required; German admission is preferred. You will work with ML/engineering teams, liaise with regulators, and help build zero-to-one compliance programs with model cards, data governance, and conformity documentation.

Qualifications

• Qualified lawyer with EU admission and 4+ years PQE.
• Strong expertise in EU AI Act, GDPR, DSA and digital regulation.
• Experience translating legal requirements into engineering guidance.

Responsibilities

• Translate complex legal rules into actionable technical requirements for engineering and product teams.
• Collaborate with regulators and internal stakeholders to shape compliance strategy.
• Build and maintain compliance programs and documentation (FRIA, model cards, data governance).

Skills

EU AI Act expertise

GDPR/DSA knowledge

Regulatory engineering

Stakeholder translation

Education

EU member state bar admission

Tools

DPA drafting

Regulatory tooling

Job description

This opportunity was posted more than 30 days ago and no application deadline was provided. You can explore active listings below.

Counsel, Privacy and AI Regulation (EU)

C

Organising Institution / Firm

Cohere

Not Specified by Organiser

European Union (Remote-friendly; Offices in London, Paris, Berlin, etc.)

Not Specified

Qualified lawyer in at least one EU member state (German admission preferred); 4+ years legal experience (law firm + in-house at enterprise software company preferred); Deep expertise in EU AI Act, GDPR, DSA, and digital platform regulation; Proven track record managing regulatory risk and building compliance programs; Strong understanding of AI/ML technologies, product lifecycles, and data governance; Ability to translate complex legal concepts into actionable guidance for engineering and product teams.

Full-time Job

Full Opportunity Brief

Navigating the Frontier: Why the Cohere Counsel Role Defines the Future of AI Law in Europe

The legal profession is undergoing a seismic shift. For decades, the archetype of a technology lawyer involved negotiating software licenses or managing data processing addendums. Today, the frontier has moved. The posting for Counsel, Privacy and AI Regulation (EU) at Cohere—a leader in security-first enterprise AI is not merely a vacancy; it is a blueprint for the next generation of legal practice. With the EU AI Act transitioning from legislative text to enforceable reality, the demand for lawyers who can translate "high-risk" classifications into engineering sprints has exploded. This role sits precisely at that intersection, offering a rare chance to build the compliance architecture for foundation models that power global enterprises.

Insight: This is not a "privacy counsel" role retrofitted for AI. It is a dedicated AI Regulation mandate. The distinction signals that Cohere treats regulatory strategy as a core product differentiator, not a back-office cost center.

Deconstructing the Mandate: Beyond GDPR into the Algorithmic Accountability Era

The job description reveals a scope that extends far beyond traditional DPO (Data Protection Officer) duties. The successful candidate will "convert complex legal requirements and industry standards into actionable technical and operational requirements." This phrasing is deliberate. It implies a daily workflow where you sit with ML engineers and product managers to dissect model training data provenance, evaluate systemic risk under Article 55 of the AI Act, and draft technical documentation for conformity assessments before a model hits the API endpoint.

You are expected to liaison with EU digital regulatory authorities and participate in consultations. This is public policy work embedded inside a product company. For a lawyer trained in the adversarial or transactional trenches, this represents a pivot to regulatory engineering—a skill set currently commanding a massive premium in the London, Paris, and Berlin markets.

The "Trust-by-Design" Imperative

Cohere’s framing—"shape the future of trust-by-design for enterprise AI solutions"—is the operational keyword. Enterprise buyers (banks, healthcare, government) cannot adopt generative AI without verifiable compliance artifacts: Model Cards, Data Sheets, Fundamental Rights Impact Assessments (FRIA), and Third-Party Conformity Assessment certificates. Your output in this role becomes the sales enablement collateral for a multi-billion dollar valuation. That is tangible career capital.

Profile of the Ideal Candidate: The Hybrid Technologist-Lawyer

The eligibility criteria are surgically specific. Admission in an EU member state is non-negotiable; German admission is "preferred" likely because Berlin is a key office hub and Germany’s regulatory interpretation (via the BKartA and state DPAs) often sets the tone for EU enforcement. The 4+ year PQE requirement with a blend of law firm rigor and in-house pragmatism suggests they need someone who can draft a watertight DPA (Data Processing Agreement) on Monday and debate tokenization strategies with researchers on Tuesday.

• Hard Law Expertise: EU AI Act (Risk tiers, GPAI obligations, Conformity Assessment), GDPR (Art. 25 By Design, Art. 35 DPIA, Schrems II transfer mechanisms), DSA (VLOP obligations, systemic risk auditing).
• Technical Fluency: Understanding of RAG (Retrieval-Augmented Generation), fine-tuning vs. pre-training data liabilities, model inversion attacks, and differential privacy.
• Operational Muscle: Building compliance programs from zero-to-one (workflows, risk registers, automated monitoring), not just maintaining existing ones.
• Stakeholder Translation: The ability to tell a VP of Engineering "No, we cannot ship this feature without a FRIA" in a way that preserves the relationship and the timeline.

Strategic Career Trajectory: Why This Move Pays Dividends for a Decade

Taking this role positions you at the absolute vanguard of the "AI Governance" specialization. The market is bifurcating: generalist tech lawyers are commoditized; specialists in AI conformity assessment are scarce. By joining Cohere now—during the AI Act’s implementation grace period (2024-2026)—you gain first-mover experience in operationalizing the Regulation.

Career Capital Alert: In 3 years, when every Fortune 500 company needs a Head of AI Governance, the candidates who built the first-gen compliance stacks at foundation model providers (Cohere, OpenAI, Anthropic, Mistral) will be the only ones qualified. This role is a ticket to that C-suite track.

The compensation package signals the value placed on this niche. Six weeks (30 working days) of paid vacation, 100% parental leave top-up, and a dedicated mental health budget are not standard "perks"; they are retention tools for high-leverage talent in a seller's market. The remote-first policy with global office access (Toronto, London, NYC, SF, Montreal, Paris, Berlin, Seoul) offers genuine lifestyle design—critical for senior lawyers escaping the billable hour grind.

Final Verdict: A Defining Role for the Regulation Generation

This opportunity is not for the lawyer seeking a quiet in-house landing spot. It is for the ambitious counselor who wants to write the playbook for AI governance in the Western world. The learning curve is vertical, the visibility is global, and the exit options—whether to Big Tech policy, VC-backed AI startups, or regulatory bodies—are limitless. If your admission certificate gathers dust while you read the AI Act recitals for fun, this is your arena.

Frequently Asked Questions (FAQs)

Q1: Is German bar admission strictly mandatory for this role?

A: The job description states qualification in at least one EU member state is required, with German admission "preferred." This usually indicates the role will involve significant interaction with German regulators (Bundesnetzagentur, state DPAs) or the Berlin office. Candidates admitted in France, Ireland, or the Netherlands with strong EU AI Act expertise should still apply, but be prepared to demonstrate fluency in German regulatory nuance or a willingness to engage local counsel heavily.

Q2: What does "Mid-Senior level" imply for years of PQE and compensation at Cohere?

A: Mid-Senior typically maps to 5-10 years PQE. Given the specialized AI/Privacy intersection, Cohere likely benchmarks compensation against top-tier US/UK tech firms (Meta, Google, DeepMind) rather than traditional London magic circle firms. Expect a package heavily weighted toward RSUs/equity (given Cohere's unicorn status) plus a competitive base salary, likely in the €150k–€220k+ total comp range for EU locations, adjusted for local market (Berlin vs. Paris vs. London).

Q3: How does the "AI-enabled screening" mentioned in the disclaimer affect my application?

A: Cohere uses AI tools to rank candidates against the criteria (EU admission, 4+ yrs, AI Act, GDPR, DSA, in-house tech). To pass this filter, your LinkedIn profile and resume must contain these exact keywords in the Skills and Experience sections. Do not use synonyms like "Data Protection Law"; use "GDPR." Do not write "Artificial Intelligence Law"; write "EU AI Act" and "GPAI Compliance." Optimize for the parser first, the human second.

Q4: Can this role be performed fully remotely from a non-EU country?

A: Unlikely. The requirement for EU bar admission and the mandate to "liaise with EU digital regulatory authorities" strongly implies a physical presence within the EU jurisdiction. The "Remote-friendly" policy applies to employees based in countries where Cohere has legal entities (e.g., Germany, France, UK, Ireland, Netherlands, Poland, Spain). Working from a non-EU jurisdiction (e.g., US, India, UAE) would create permanent establishment and tax risks for the company, and likely violate the "admitted in EU" requirement.