Regulatory Compliance Lead — AI-Driven Legal Programs

Staffbase; Hem; On-site; EUR 60,000 - 90,000; Full time

Job summary

Staffbase is seeking an Associate Legal Counsel to own and scale our regulatory compliance program. You will drive certifications, policy governance, and risk assessments while collaborating with Security, Product, and Legal teams.

The role emphasizes leveraging AI to streamline compliance and reduce manual workload. Focusing on NIS2, the Cyber Resilience Act, EU AI Act, and global data protection laws, you will shape policies, training, and monitoring.

Qualifications

• Fully qualified lawyer with 2nd State Exam in Germany or EU equivalent.
• German language fluency (C1) and proficient English.
• Strong ownership mentality and ability to run a program independently.
• Attention to detail with a process-driven compliance mindset.
• Willingness to support commercial or corporate work when needed.
• Tech-savvy and open to AI-driven compliance solutions.

Responsibilities

• Build and run Staffbase's compliance program across regulations (NIS2, Cyber Resilience Act, EU AI Act, data protection).
• Drive new certifications (e.g., ISO 27701/27001) and coordinate audits with cross-functional teams.
• Draft, maintain and update internal policies on a defined review cycle.
• Design and run periodic compliance risk assessments and track remediation to closure.
• Deliver company-wide compliance training programs and foster AI-enabled automation.
• Monitor regulatory developments and translate into practical guidance for the business.
• Collaborate with Security, IT, People, and Product to embed compliance in day-to-day operations.

Education

2nd State Exam in Germany or EU equivalent

Job description

Staffbase is seeking an Associate Legal Counsel to own and scale our regulatory compliance program. You will drive certifications, policy governance, and risk assessments while collaborating with Security, Product, and Legal teams.

The role emphasizes leveraging AI to streamline compliance and reduce manual workload. Focusing on NIS2, the Cyber Resilience Act, EU AI Act, and global data protection laws, you will shape policies, training, and monitoring.