Senior Counsel, Privacy & AI Compliance (EU)

Coreweave; Barcelona; Presencial; EUR 110 000 - 150 000; Tempo integral

Resumo da oferta

CoreWeave, a leading cloud provider, seeks a privacy and regulatory counsel to advise on EU privacy, AI governance, and data protection across Europe. You will partner with Product, Engineering, Security, and Commercial teams to ensure compliant, scalable practices for cloud infrastructure and products.

You will lead DPIAs, transfer assessments, and governance efforts, translating complex regulations into actionable guidance for regional teams and external partners.

Qualificações

• 4+ years of relevant legal experience advising on European privacy and data protection matters.
• Strong knowledge of GDPR and UK GDPR obligations, data transfers and DPIAs.
• Experience translating legal requirements for product, engineering, and business teams.
• Familiarity with AI governance and emerging AI regulation.

Responsabilidades

• Advise on EU/UK privacy, data protection, and AI regulatory developments.
• Translate complex legal requirements into practical guidance for cross-functional teams in Europe.
• Lead or support privacy assessments for new products and data uses.
• Embed privacy by design and responsible AI into product architecture.
• Advise on cross-border data transfers and related contractual terms.
• Develop regional privacy policies, controls, and governance documents.

Conhecimentos

Privacy law

GDPR

EU law

AI governance

Descrição da oferta de emprego

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com.
We're proud to be a Living Wage accredited Employer.

What You’ll Do

The Legal and Government Affairs team at CoreWeave is highly collaborative and partners closely with teams across the company to navigate complex legal landscapes while enabling innovation and growth. The team is pragmatic, solutions-oriented, and deeply engaged in strategic decision-making, with a strong emphasis on building trusted relationships across the organization.

About The Role

Reporting to the Senior Director & Lead Managing Counsel, Privacy, Regulatory & Compliance, you will independently advise on complex regional matters, help operationalize evolving legal requirements, and partner closely with Privacy, Product, Engineering, Security, Commercial Legal, Government Affairs, and business teams across Europe. You will play a central role in scaling practical, risk-based privacy and AI compliance frameworks for CoreWeave’s cloud infrastructure, products, and European operations.

In This Role You Will

• Advise on EU and UK privacy, data protection, and AI laws and regulatory developments, including the GDPR, UK GDPR, ePrivacy requirements, the EU AI Act, the EU Data Act, and related national implementing laws and guidance.
• Translate complex legal requirements into clear, practical, and scalable guidance for Product, Engineering, Security, Commercial, Marketing, HR, Procurement, and operational teams across Europe.
• Lead or support privacy and AI assessments for new and evolving products, features, data uses, vendors, and business initiatives, including DPIAs, legitimate-interest assessments, transfer impact assessments, AI risk and classification analyses, and documented compliance decisions.
• Partner with Product and Engineering to embed privacy by design and default, responsible AI, data minimization, transparency, security, retention, and governance requirements into product architecture and development processes.
• Advise on international data transfers, data localization and residency requirements, cross-border access, and related contractual and operational mechanisms, including EU Standard Contractual Clauses and the UK International Data Transfer Addendum or Agreement.
• Support implementation of CoreWeave’s AI compliance framework in Europe, including role and use‑case classification, risk management, transparency, recordkeeping, human oversight, technical documentation, contractual allocation of responsibilities, and governance for internal and customer‑facing AI uses.
• Provide regional guidance on data subject rights, records of processing, privacy notices, consent and cookies, retention and deletion, data sharing, direct marketing, and other core privacy program requirements.
• Advise on European product launches, market entry, strategic partnerships, customer and vendor arrangements, and commercial terms involving privacy, data use, AI, and regulatory responsibility.
• Support cybersecurity and privacy incident response in Europe, including assessment of regulator and data subject notification obligations, engagement with relevant stakeholders, and documentation of defensible legal decisions.
• Lead or support responses to inquiries, audits, consultations, and investigations involving European data protection authorities, AI regulators, and other governmental bodies; coordinate with local counsel and drive follow‑up and remediation.
• Develop and maintain regional policies, procedures, playbooks, training, control mappings, and evidence of compliance, and monitor emerging legal and enforcement trends to inform business strategy and program priorities.

Who You Are

• 4+ years of relevant legal experience, including substantial experience advising on European privacy and data protection matters; a mix of law firm, regulatory, and in‑house experience is preferred.
• Qualified to practice law in an EU member state or the United Kingdom and in good standing with the applicable professional body.
• Strong working knowledge of the GDPR and UK GDPR, including controller and processor obligations, privacy‑by‑design requirements, data subject rights, international transfers, DPIAs, security and breach notification, and regulator engagement.
• Meaningful experience with AI governance or emerging AI regulation, including the ability to interpret and operationalize the EU AI Act for technology, cloud, infrastructure, or enterprise use cases.
• Demonstrated ability to independently manage complex regional matters, identify material risk, present practical options, and make clear, defensible recommendations in ambiguous situations.
• Experience building or operationalizing privacy and AI compliance programs through policies, assessments, controls, training, governance processes, monitoring, and audit‑ready documentation.
• Technical fluency and the ability to understand data flows, cloud architecture, product functionality, AI systems, and security practices and translate them into actionable legal guidance.
• Excellent drafting and communication skills, with the ability to explain complex legal requirements clearly and influence technical, commercial, and business stakeholders across jurisdictions.
• Proven ability to build trusted cross‑functional relationships, manage multiple priorities, and work effectively in a fast‑paced, rapidly scaling global environment.

Preferred

• Experience advising a high‑growth cloud, AI, SaaS, data center, infrastructure, or other technology company.
• Experience engaging with European data protection authorities, AI regulators, standards bodies, industry groups, or external counsel on novel technology issues.
• Experience advising on cross‑border data transfers, cloud service provider obligations, enterprise AI governance, and the allocation of regulatory responsibilities between providers and customers.
• Familiarity with recognized privacy, security, and AI governance frameworks or standards, such as ISO/IEC 27701, ISO/IEC 42001.

Wondering if you’re a good fit?

We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match. Here are a few qualities we’ve found compatible with our team. If some of this describes you, we’d love to talk.

• You remain calm under pressure and can make sound, defensible decisions when facts are still developing.
• You’re curious about technology and enjoy working closely with security and engineering teams to understand how systems operate.
• You communicate complex legal risk clearly and concisely, with a practical focus on protecting customers and enabling the business.

Why CoreWeave?

At CoreWeave, we work hard, have fun, and move fast! We’re in an exciting stage of hyper‑growth that you will not want to miss out on. We’re not afraid of a little chaos, and we’re constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values:

• Be Curious at Your Core
• Act Like an Owner
• Empower Employees
• Deliver Best‑in‑Class Client Experiences
• Achieve More Together

We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organization's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us!

About

The starting salary will be determined by job‑related knowledge, skills, experience, and the market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).

What We Offer

In addition to a competitive salary, we offer a variety of benefits to support your needs, including:

• Family-level Medical Insurance
• Family-level Dental Insurance
• Generous Pension Contribution
• Life Assurance at 4x Salary
• Critical Illness Cover
• Employee Assistance Programme
• Tuition Reimbursement
• Work culture focused on innovative disruption

Benefits may vary by location.

Equal Opportunity

CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.

Recruitment Agencies

CoreWeave does not accept speculative CVs. Any unsolicited CVs received will be treated as the property of CoreWeave and your Terms & Conditions associated with the use of CVs will be considered null and void.

Any unsolicited CVs sent by your company to us – that is to say, in any situation where we have not directly engaged your company in writing to supply candidates for a specific vacancy – will be considered by us to be a “free gift”, leaving us liable for no fees whatsoever should we choose to contact the candidate directly and engage the candidate’s services, and will in no way establish any prior claim by your company to representation of that candidate should the candidate’s details also be submitted by any other party.

Export Control Compliance

This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C.

• 1157, or (iv) asylee under 8 U.S.C.
  
• 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Updated privacy notice - UK and EU Job Applications

When you apply to a job on this site, the personal data contained in your application will be collected by CoreWeave UK Ltd. (“Controller”), which is located at Phosphor (6th Floor), 133 Park Street, London, SE1 9EA and can be contacted by emailing [e-mail]. Controller’s data protection officer can be contacted at [e-mail]. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of (i) Regulation (EU) 2016/679 (General Data Protection Regulation (“GDPR”) and (ii) the GDPR as it forms part of the laws of the UK (“UK GDPR”), as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment. Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. With respect to transfers originating from the UK or the European Economic Area (“EEA”) to a country outside the UK or the EEA, we implement the appropriate transfer mechanism(s) and other appropriate solutions to address cross‑border transfers as required by applicable law. You may request a copy of the suitable mechanisms we have in place by contacting us at [e-mail]. Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Where permitted by applicable law, we may also retain your personal data for a limited period after the recruitment process ends in order to consider you for future job opportunities, respond to legal claims, or comply with record‑keeping obligations. Under the GDPR and the UK GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with the relevant supervisory authority: (i) A list of Europe’s data protection authorities can be found here; and (ii) for the UK, this is the Information Commissioner's Office.

For additional information, please see our Privacy Policy.