Counsel - Privacy, Security & AI Office

Harness; Madrid; Presencial; EUR 25.000 - 30.000; Jornada completa

Descripción de la vacante

A leading software company in Madrid seeks an experienced Counsel for its Privacy, Security & AI Office. The role involves guiding compliance with privacy regulations, advising stakeholders, and developing AI policies. Candidates should have significant legal experience and expertise in GDPR and technology law. This full-time position offers a competitive salary and opportunities for professional growth.

Formación

• 6–10+ years of legal experience in privacy, data protection, and tech law.
• Deep understanding of GDPR, CCPA/CPRA, and other privacy frameworks.
• Experience with PIAs, DPIAs, and cross-border data transfers.

Responsabilidades

• Support the development of AI Governance Program.
• Collaborate with product teams to evaluate privacy compliance risks.
• Lead and conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).

Conocimientos

Privacy and data protection

Technology law

GDPR knowledge

AI regulatory frameworks

Educación

Qualified lawyer

Active bar membership

Descripción del empleo

Harness Madrid, Community of Madrid, Spain

Join to apply for the Counsel – Privacy, Security & AI Office role at Harness

Harness is a high-growth company that is disrupting the software delivery market. Our mission is to enable the 30 million software developers in the world to deliver code to their users reliably, efficiently, securely and quickly, increasing customers’ pace of innovation while improving the developer experience. We offer solutions for every step of the software delivery lifecycle to build, test, secure, deploy and manage reliability, feature flags and cloud costs. The Harness Software Delivery Platform includes modules for CI, CD, Cloud Cost Management, Feature Flags, Service Reliability Management, Security Testing Orchestration, Chaos Engineering, Software Engineering Insights and continues to expand at an incredibly fast pace.

Harness is led by technologist and entrepreneur Jyoti Bansal, who founded AppDynamics and sold it to Cisco for $3.7B. We’re backed with $425M in venture financing from top-tier VC and strategic firms.

About The Role

We are seeking an experienced and strategic Counsel to join our Privacy, Security & AI (“PSAI”) Office. In this role, you will play a critical part in guiding our product and AI compliance, supporting global privacy and data protection strategy, and helping shape the company’s approach to responsible and ethical data use.

You’ll advise senior leadership, collaborate with cross-functional stakeholders, and help ensure that our data practices are aligned with global legal and regulatory obligations, including those emerging around AI governance and advanced technologies.

Key Responsibilities

• Support the development and implementation of the AI Governance Program
• Draft and implement AI policies, procedures, and best practices for both internal use of AI and product development
• Lead internal awareness campaigns to foster a culture of responsible AI across the organization.
• Support AI Use Case Intake Assessments
• Provide AI advice to key stakeholders (product, procurement)
• Support customers queries and questionnaires

Product Compliance

• Collaborate closely with product and engineering teams to evaluate and mitigate privacy and AI compliance risks during development and deployment.
• Review and assess AI / ML use cases for compliance with legal and ethical standards, including EU AI Act, OECD AI Principles, and NIST AI RMF.
• Contribute to development of governance frameworks for responsible AI, including fairness, explainability, and accountability controls.

Privacy & Data Protection Legal Strategy

• Lead complex legal analysis and provide strategic privacy advice on global data protection laws (e.g., GDPR, CCPA / CPRA, LGPD, PIPEDA, APPI), with a main focus on US federal and state privacy and EU GDPR
• Guide business and technical teams on lawful bases for processing, purpose limitation, transparency, and data minimization.
• Evaluate and advise on complex personal data use cases, including sensitive data, automated decision-making, and biometric processing.
• Implement best practices around privacy to ensure the competitive edge of the company
• Draft and review breach-related communications, including regulator and data subject notices.
• Conduct privacy reviews for third-party vendors and tools to ensure alignment with internal standards and legal requirements.
• Drive the development, maintenance, and enhancement of the company’s privacy compliance program.
• Maintain and oversee updates to the Records of Processing Activities (ROPA), and ensure accountability documentation is current and complete.
• Partner with security, compliance, and product teams to integrate privacy by design into internal processes and external-facing technologies.
• Lead and advise on complex Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Oversee and conduct Transfer Impact Assessments (TIAs) to assess and document data transfer risks.
• Manage Legitimate Interests Assessments (LIAs) and ensure robust justification and safeguards are in place.
• Identify privacy and AI-related risks and recommend scalable mitigation strategies across the organization.

Audits, Monitoring & Regulatory Readiness

• Support or lead the legal function in responding to privacy audits, regulator inquiries, and due diligence requests.
• Prepare documentation, gap analyses, and remediation plans to ensure audit readiness.
• Track and interpret global privacy and AI regulatory developments, and support internal implementation efforts.

Qualifications

Required :

• Qualified lawyer (active bar membership in at least one jurisdiction).
• 6–10+ years of legal experience, with a focus on privacy, data protection, and technology law.
• Deep understanding of GDPR, CCPA / CPRA, and global privacy frameworks.
• Preferred experience with FedRamp, PCI DSS and ISO frameworks
• Extensive experience with PIAs / DPIAs, TIAs, LIAs, and cross-border data transfer mechanisms.
• Strong understanding of privacy issues in product development, data science, and AI applications.

Preferred

• CIPP / E, CIPP / US and AIGP
• Direct experience working with or interpreting AI legal and regulatory frameworks (e.g., EU AI Act).
• Strong negotiation skills, particularly in data protection clauses and international data transfer agreements.

Harness In The News

• Harness Grabs a $150m Line of Credit
• Welcome Split!
• SF Business Times - 2024 - 100 Fastest-Growing Private Companies in the Bay Area
• Forbes - 2024 America's Best Startup Employers
• SF Business Times - 2024 Fastest Growing Private Companies Awards
• Fast Co - Best Workplaces for Innovators

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.

Note on Fraudulent Recruiting / Offers

We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers.

Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the domain @harness.io. Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.

If you believe that you have been the target of an interview / offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission’s website ( or you can contact your local law enforcement agency.

Seniority level

• Seniority level Mid-Senior level

Employment type

• Employment type Full-time

Job function

• Job function Legal

Industries

• Industries Software Development

Referrals increase your chances of interviewing at Harness by 2x

Sign in to set job alerts for “Lawyer” roles.

Greater Madrid Metropolitan Area 1 month ago

Madrid, Community of Madrid, Spain 4 days ago

Madrid, Community of Madrid, Spain 5 days ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain €25,000.00-€30,000.00 2 weeks ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 2 weeks ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 2 weeks ago

Madrid, Community of Madrid, Spain 2 weeks ago

Madrid, Community of Madrid, Spain 4 days ago

Madrid, Community of Madrid, Spain 2 weeks ago

Madrid, Community of Madrid, Spain 1 month ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 1 hour ago

Madrid, Community of Madrid, Spain 3 weeks ago

Madrid, Community of Madrid, Spain 4 months ago

Madrid, Community of Madrid, Spain 2 weeks ago

Madrid, Community of Madrid, Spain 6 days ago

Madrid, Community of Madrid, Spain 2 weeks ago

Madrid, Community of Madrid, Spain 6 days ago

Madrid, Community of Madrid, Spain 1 week ago

Madrid, Community of Madrid, Spain 1 day ago

Madrid, Community of Madrid, Spain 3 weeks ago

Madrid, Community of Madrid, Spain 6 days ago

Greater Madrid Metropolitan Area 1 month ago

Madrid, Community of Madrid, Spain 5 months ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

J-18808-Ljbffr

J-18808-Ljbffr