Legal Officer, Implicity

• Master's degree in Law, ideally with a specialization (Master 2) in Health Law, Business Law and/or IT/Data Law
• Solid experience with data privacy regulations (GDPR, HIPAA, UK GDPR), including implementation of compliance programs and drafting of key documentation (DPIA, records of processing, consents, etc.)
• Proven track record (2 to 5 years) in reviewing, drafting, and negotiating a wide range of contracts: commercial agreements, service contracts, distribution agreements, marketing contracts, data processing agreements (DPA), business associate agreements (BAA), terms of use (CGU), public procurement, etc
• Experience in legal risk assessment, managing disputes and claims (including insurance and client-related matters), and supporting legal strategy in litigation
• Fluency in both French and English, written and spoken
• Rigorous, structured, business-oriented, and able to work autonomously and with external legal advisors when necessary
• Excellent legal writing and synthesis skills in both French and English
• Ability to provide operational legal advice and write clear, actionable legal notes
• Comfortable working with cross-functional teams including product, compliance, sales, IT, and marketing
• Ability to assess and manage compliance risks across different business activities, especially marketing and commercial operations
• Familiarity with ISO standards (ISO 13485, ISO 27001) and Health Data Hosting (HDS) requirements
• Ability to navigate and work effectively in a multi-jurisdictional environment (France, EU, U.S.)
• Curious, adaptable, and comfortable with digital tools such as Notion, Slack, and Google Drive
• Team player, ready to collaborate with or work under the guidance of the current Legal Counsel

Desirable

• You will join the Regulatory Affairs and Legal team, and will be in charge of:
• Compliance of projects with personal data protection laws and regulations, especially health personal data protection (GDPR, French Data Protection Act, HIPAA, UK GDPR, etc.):
• French and European Level: Drafting processing registers, conducting impact assessments, informing data subjects, requesting authorizations, and declaring compliance with reference methodologies
• American Level: Implementing the Privacy and Security Compliance Program (in accordance with HIPAA)
• Drafting, Negotiation, and Monitoring of Contracts with various stakeholders (Clients, subcontractors, IT providers, partners), including: Public procurement contracts, service provision contracts, General Terms of Use (GTU), partnership agreements, Data Protection Agreements (DPA) and Business Associate Agreements (BAA), agreements with healthcare professionals, etc
• Compliance with laws and regulations (in France, Europe, and the United States): Anti-gift laws and transparency of links of interest, medical device regulations, social security, etc
• Advisory services for operational teams and drafting legal notes in various legal fields, particularly in: Health law, medical device law, information and communication technology law, etc
• Assistance and compliance with the requirements of ISO 27001, ISO 13485, and Health Data Hosting standards
• Ensuring legal and doctrinal watch
• At Implicity, you will have a weekly meeting with your manager, to help you succeed in your mission, and continuously improve your skills
• Each team works with quarterly OKR, to be crystal clear, fair and honest with your targets
• The annual appraisal is a shared exchange moment, focused on your development

• Initial HR interview (30 minutes)
• Interview with the Legal Counsel and the Head of Regulatory Affairs (60 minutes)
• Legal and technical questions related to your future responsibilities
• Final interview with the CEO and/or COO (60 minutes)
• Reference check
• Job offer (usually issued within 72 hours 🤞)
• Depending on your availability, the recruitment process should last less than 3-4 weeks