Legal Counsel, HelloBetter

• The ideal candidate will be a fully qualified lawyer with a strong background in data privacy law, a proactive and organised approach, and a commitment to fostering a culture of security and compliance within the organisation
• Law degree (at least 1st state exam) or equivalent European qualification
• 3+ years of post-qualification experience in a data protection or technology-focused legal role, either in-house or at a reputable law firm
• Demonstrable experience in managing and maintaining a data protection management system and/or providing legal counsel on an information security management system, including extensive experience managing audits
• In-depth experience in handling data subject requests and managing security/privacy incidents from a legal perspective
• Excellent organisational and project management skills, with the ability to manage multiple tasks and deadlines effectively
• Strong communication and negotiation skills, with the ability to collaborate effectively with both technical and non-technical stakeholders
• A proactive and solution-oriented mindset, with a keen eye for detail
• Fluency in English and German (both written and spoken, including legal and business proficiency)

Desirable

• Reports to: Philip Ihde, Chief Operating Officer
• The Legal Counsel will be a key legal advisor and a central figure in our efforts to maintain and enhance our data protection and information security posture
• This role is responsible for providing expert legal guidance and overseeing the operational management of our data protection and information security management systems, ensuring compliance with GDPR, DiGAV, and other relevant regulations
• Provide legal guidance on and oversee the data protection management system, including retention policies, Data Protection Impact Assessments, Technical and Organisational Measures, and records of processing activities
• Drive data protection certification process pursuant to Article 42 GDPR (once available)
• Manage and respond to data subject requests received through various channels, ensuring timely and accurate resolution
• Serve as the primary point of contact for our external Data Protection Officer
• Provide legal support for the management and monitoring of the ISMS (ISO 27001), including legal aspects of supplier management, incident management, and risk management
• Advise on the implementation of information security norms and standards throughout the organisation to ensure legal and regulatory adherence
• Organise, execute, and follow up on internal and external audits, including the implementation of opportunities for improvement
• Monitor legal and regulatory developments in data privacy and information security, providing strategic updates and recommendations to the management team
• Develop, implement, improve, and monitor data privacy and information security training programs for all employees
• Contribute to a quarterly leadership newsletter with a focus on GDPR and other relevant topics
• Draft, review, and negotiate a variety of commercial contracts, with a particular focus on data processing agreements, supplier agreements, and technology licensing
• Provide pragmatic legal advice to various teams on contract law, corporate governance, and other legal matters as they arise
• Contribute legal expertise to various internal projects related to data protection and information security
• Collaborate with cross-functional teams to ensure that "privacy and security by design" principles are embedded in all new projects and initiatives
• Participate in relevant industry groups and forums to stay abreast of best practices and emerging legal trends

• 1. Screening Interview with People team (30 min)
• 2. Take-home Case Study (2 hours)
• 3. Case Study & Technical Interview with the Legal team (60 min)
• 4. Hiring Manager Interview with Philip, Chief Operating Officer (60 min)
• 5. Offer Talk (15 min)