Associate Legal Counsel

Staffbase; Hem; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Staffbase is seeking an Associate Legal Counsel to own and scale our regulatory compliance program. You will drive certifications, policy governance, and risk assessments while collaborating with Security, Product, and Legal teams.

The role emphasizes leveraging AI to streamline compliance and reduce manual workload. Focusing on NIS2, the Cyber Resilience Act, EU AI Act, and global data protection laws, you will shape policies, training, and monitoring.

Qualifications

• Fully qualified lawyer with 2nd State Exam in Germany or EU equivalent.
• German language fluency (C1) and proficient English.
• Strong ownership mentality and ability to run a program independently.
• Attention to detail with a process-driven compliance mindset.
• Willingness to support commercial or corporate work when needed.
• Tech-savvy and open to AI-driven compliance solutions.

Responsabilités

• Build and run Staffbase's compliance program across regulations (NIS2, Cyber Resilience Act, EU AI Act, data protection).
• Drive new certifications (e.g., ISO 27701/27001) and coordinate audits with cross-functional teams.
• Draft, maintain and update internal policies on a defined review cycle.
• Design and run periodic compliance risk assessments and track remediation to closure.
• Deliver company-wide compliance training programs and foster AI-enabled automation.
• Monitor regulatory developments and translate into practical guidance for the business.
• Collaborate with Security, IT, People, and Product to embed compliance in day-to-day operations.

Formation

2nd State Exam in Germany or EU equivalent

Description du poste

• We're looking for an Associate Legal Counsel to join our Legal team and take ownership of regulatory compliance at Staffbase
• You'll work across a broad docket - supporting commercial and corporate matters alongside the rest of the team - but your primary focus and area of ownership will be building and running our compliance program: navigating an expanding regulatory landscape (including NIS2, the Cyber Resilience Act, the EU AI Act, and global data protection laws), driving new certifications (including ISO 27701), and keeping our policies, training, and risk assessments current.
• You'll also have real latitude to modernize how we do this work, using AI to make compliance faster and more scalable - not more paperwork-heavy
• Closely collaborate with the Head of Legal to drive Staffbase's regulatory compliance program end to end - tracking obligations and driving implementation across regulations including NIS2, the Cyber Resilience Act, the EU AI Act, and global data protection laws
• Lead the roadmap for new and renewed certifications (e.g. ISO 27001), coordinating with Security, Product, and other teams to prepare for audits
• Draft, maintain, and update internal policies on a defined review cycle, keeping them current as regulations evolve
• Design and run compliance risk assessments on a consistent schedule, and track remediation through to closure
• Build and deliver company-wide compliance training programs
• Champion the use of AI to streamline compliance work - from regulatory monitoring and policy drafting to risk tracking and reporting - and bring your own ideas for where automation can replace manual process
• Support commercial and corporate legal work alongside the wider Legal team, including customer contract review, procurement agreements, and corporate governance matters
• Independently monitor the regulatory landscape and translate new developments timely into practical guidance for the business
• Partner cross-functionally with Security, IT, People, and Product teams to embed compliance requirements into day-to-day operations

• Authentically and deeply tech-savvy - you don't just tolerate AI and legal automation, you actively seek it out, champion it, and have a clear vision for where it can take a legal and compliance function.
• Based in Germany, with fluency in German and English (C1 minimum)
• Excellent attention to detail and a structured, process-driven approach to recurring compliance work
• Genuine interest in - and some exposure to - commercial or corporate legal work, with willingness to support deals and procurement as capacity allows
• Clear, confident communicator, able to translate regulatory requirements into practical guidance for non-lawyers
• Fully qualified lawyer - 2nd State Exam in Germany, or an equivalent qualification from another EU jurisdiction
• Strong ownership mentality and comfort running a program independently with support from the Head of Legal