Legal Counsel - IT & Data Protection

Hi, we’re AMBOSS and we’re searching for a Legal Counsel to support our business in IT & Data Protection matters! About AMBOSSAMBOSS is the copilot for medical professionals, empowering them to provide the best possible care through our learning and clinical decision support tool. Our team brings together care, innovative thinking, and cutting-edge AI medical technology. Our founders launched AMBOSS in 2012 with the goal of creating a tool they wished they had during medical school and clinical practice. Since then, we've grown to over 600 employees and are active in over 180 countries - primarily in Germany and the US. Our offices are located in Berlin, Cologne, New York, Cagliari and Cape Town. Want to learn more about our culture? Watch our video to explore what makes us unique Why can this position be exciting for you?In this role, you will be the core link between regulatory requirements and day-to-day operations. By partnering in early stages with product and engineering teams, you turn complex privacy rules – including emerging AI frameworks – into straightforward, actionable guidance that keeps projects moving forward & safely. From streamlining vendor reviews and data subject requests to mapping risks across our systems, your work lead to practical processes, ensuring AMBOSS expands into new markets with scalable compliance already built in. You will:Be a trusted data protection advisor for our teams. You partner with product and engineering from concept to launch, including on [AI-based features / new markets]. You give clear, pragmatic recommendations. Own data protection risk assessment across our systems and processes. You identify, assess and prioritise compliance risks and turn them into practical frameworks that teams can use. Keep us ahead of international requirements. You track data protection and related regulation in our markets, including AI-related rules, and turn them into pragmatic solutions for AMBOSS. Make vendors, tools and contracts easy to get right. You review and negotiate data processing agreements and assess new software and vendors, so the business gets fast, reliable answers. Build and improve our data protection operations. You own our policies, the record of processing activities and the handling of data subject requests (access, rectification, erasure). You simplify, standardise and automate wherever possible. Work as one team. You collaborate closely with our DPO, the General Counsel and the wider Legal team, and bring in external input when it makes sense. You bring:Legal qualification (Diploma; 1st state exam, LLM or international equivalent) At least 4 years of experience in IT law and data protection at a law firm or in-house, with a clear track record of giving practical, decision-ready advice to a diverse range of stakeholders Strong working knowledge of GDPR and how to apply it pragmatically in a product environment Prior experience working alongside engineering, product, and technical teams to translate complex legal, regulatory, and compliance requirements into actionable product features, technical specifications, and workflows Technical curiosity: you enjoy understanding how systems and data flows work A pragmatic interest in AI and legal technology, and ideally experience using these tools to work faster and more effectively You enjoy:A diverse Legal Portfolio: Drive a fast-evolving mix of IT legal matters, data protection frameworks, and commercial advisory Uncharted legal territory: High-stakes regulatory challenges and emerging tech questions where the playbook hasn't been written yet High autonomy, real impact: Move past "no" to craft actionable, business-enabling solutions with complete ownership of your domain Continuous Improvement: Disrupt outdated legal workflows and refine our operational baseline for scale A humorous and high-performing team :) Benefits:AMBOSSians tell us that innovative work keeps them energized and employee benefits help the