Privacy and Security Lawyer

DNV; Espoo; Hybrid; EUR 85,000 - 120,000; Full time

Job summary

DNV Cyber is seeking a Privacy and Security Lawyer to join the Advisory and Awareness unit in Espoo, Finland. You will work within multidisciplinary teams to deliver comprehensive privacy and cybersecurity services to clients across healthcare, finance, media, energy, and public sector.

You will handle practical regulatory analyses, draft documents, and provide billable advisory work while adapting to evolving regulatory environments.

Qualifications

• Bilingual Finnish/English communication skills; Swedish is a strong asset.
• Finnish law degree or equivalent, with licensure or eligibility in Finland.
• 3–4 years of post-graduate experience related to data protection, privacy, data law, AI or cybersecurity.
• Genuine interest in technology and information security; willingness to learn.
• Analytical mindset and ability to ask the right questions.
• Willingness to work in multi-skilled, cross-functional teams.

Responsibilities

• Provide billable legal advisory and consulting services to clients.
• Draft statutory documents and prepare reports and analyses.
• Support customers in navigating regulatory requirements across industries.

Skills

Finnish language proficiency

English language proficiency

Swedish language knowledge

Analytical mindset

Team collaboration

Problem solving

Can-do attitude

Education

Law degree (Finnish university or equivalent)

Job description

About Us

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence.

About Us

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence. As a trusted voice for many of the world’s most successful organizations, we use our knowledge to advance safety and performance, set industry benchmarks, and inspire and invent solutions to tackle global transformations.

About The Role

DNV Cyber is a leading cybersecurity services provider, formed by merging Nixu, Applied Risk and DNV in 2024. At DNV Cyber we take pride in safeguarding what’s critical to our customers and all of us as individuals – from personal data to industrial safety systems. We use our expertise and scale to tackle the most difficult cyber issues in multiple industries that are critical to society.

Role And Responsibilities

We are looking for a Privacy and Security Lawyer to join our DNV Cyber, Advisory and Awareness unit. In this position, you will work as part of multi-skilled, multidisciplinary teams that combine the expertise of lawyers, privacy professionals and cybersecurity experts to provide our customers with comprehensive privacy and cybersecurity services. Our customers operate across a wide range of sectors, including healthcare, finance, media, energy, industry and the public sector, which requires you to adapt quickly to new regulatory and organisational environments.

We are looking for a legal professional who can work independently, ask the right questions and solve problems. In this role, you will help customers find practical solutions to applicable regulatory requirements, draft statutory documents, and prepare reports and analyses. Your daily work will consist of billable legal advisory and consulting work.

This is a permanent position based in Espoo, Finland. We support both onsite and remote work and are always happy to take your personal circumstances into account.

Need more information?

For more information, please contact harri.vilander(at)dnv.com

#DNVCyber #hybrid

What we offer

At DNV Cyber, we empower businesses to become safer and more resilient as one of Europe’s fastest-growing cybersecurity services organisation. For our employees, DNV Cyber is a place where you can find meaningful work, have fun, and feel inspired and respected. We believe in a culture of empowerment and value professionalism in all its dimensions. Our organisational model supports knowledge sharing, collaboration and learning across unit boundaries. We work in a leading cybersecurity team that offers opportunities for professional development and supports a healthy work-life balance. At DNV Cyber, you'll have 500 colleagues who share an interest in cyber security with you. With us, you will be surrounded by the most talented people in the cybersecurity field.

Join us on an exciting adventure of growth, meaningful work, and shaping the future through cybersecurity!

DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

About You

To succeed in this role, you should have:

• Law degree from a Finnish university or equivalent (OTM or similar)
• Minimum 3–4 years of post-graduate work experience related to data protection, privacy, data law, AI or cybersecurity
• Genuine interest in technology and information security and enthusiasm to learn more
• Excellent communication skills in Finnish and English; good Swedish skills are considered a strong asset
• Analytical mindset and the ability to ask the right questions
• Willingness to work in multi-skilled teams
• Can-do attitude
• CIPP/E, CIPT, CIPM or AIGP certification is considered an asset

Security and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.