AI and Privacy Counsel
6 days ago
Madrid
ph3AI and Privacy Counsel /h3 pbDepartment: /b Legal /p pbEmployment Type: /b Permanent - Full Time /p pbLocation: /b Madrid /p pbReporting To: /b Lucy Ferrat /p h3Description /h3 pAt Sabio Group, we're building the next generation of AI-powered customer experience for some of the world's most demanding enterprise brands. We deliver significant volumes of agentic AI, LLM and conversational solutions into regulated industries, which means the legal and contractual underpinnings of how we sell, deliver and partner on AI are both a competitive advantage and a customer expectation. /p pbAbout the Role /b /p pWe're hiring a Privacy and AI Counsel to join our legal team and partner closely with our Information Security and AI Compliance Governance functions. /p pAs part of this role you will: /p ul liOwn the legal side of how global AI regulation and data protection flows through Sabio's commercial relationships; customer contracts, partner and reseller agreements, supplier and model-provider terms. /li liBe a key legal voice on EU AI Act readiness and implementation, ISO 42001 alignment, and the broader regulatory landscape shaping how we deliver AI to clients while meeting our regulatory obligations. /li /ul pSabio is already ISO 27001 and SOC 2 Type II certified and we're working towards ISO 42001. You'll help translate that posture into contractual language, negotiation positions and legal strategy. You'll do it in a fast-moving, high-growth business area with a strong remit to shape how AI is built, sold and supported across the Sabio Group. /p pThis is a hands‑on role for a lawyer with commercial, regulatory and data protection experience who is genuinely curious about AI, comfortable using AI tooling to amplify their own output, and thoughtful about how to govern it responsibly. /p h3Key Responsibilities /h3 h3Customer Partner Contracts /h3 ul liDraft, review and negotiate AI‑specific terms in: ul licustomer contracts such as IP ownership of inputs/outputs, training data rights, model use restrictions, acceptable use, liability and indemnity positions, performance and uptime, data residency, sub‑processing, exit and transition. /li lipartner, reseller and channel agreements, including with hyperscalers and AI platforms (Microsoft, Google, Anthropic, OpenAI, Cognigy and others), understanding the commercial and legal nuances of each provider's terms. You will be responsible for clarifying responsibilities, flow‑down obligations to customers and risk allocation across the value chain for these suppliers. /li /ul /li liContinued development and maintenance of Sabio's AI contracting playbook, including standard clauses, fallback positions, negotiation guidance and risk‑tiered approval matrices. /li liSupport French and/or Spanish commercial contracting during high‑volume periods to deliver increased sales bookings. /li /ul h3AI Regulatory Compliance: Legal View /h3 ul liAct as the legal lead on EU AI Act obligations. This includes advising on risk classification of solutions, provider/deployer responsibilities, transparency, due diligence, CE marking and registration, post‑market monitoring and incident reporting. /li liPartner with the AI Compliance Governance Specialist on ISO 42001 roadmap, evidencing legal controls, and aligning contractual commitments with operational reality. /li liTrack and translate emerging AI regulation across our operating jurisdictions (UK, EU, Spain, France, South Africa) into actionable legal guidance and policy updates. /li liAdvise on intersections with data protection legislation, IP law, consumer protection and sector‑specific regimes where they touch AI. /li /ul h3IP, Data Risk /h3 ul liAdvise on intellectual property in AI contexts, including use of third‑party content, use of training data, ownership and licensing of models, prompts, fine‑tunes, embeddings, datasets and generated outputs. /li liWork with the AI Compliance Governance Specialist on AI risk assessments. /li liWork with information security on data protection impact assessments. /li liAdvise on and execute Data Subject Request responses. /li liAdvise on international data transfers, related transfer impact assessments and ongoing data protection obligations. /li /ul h3Audit, Disputes Incident Response /h3 ul liSupport customer audits, regulator engagement and certification bodies on legal and contractual matters. /li liLead the legal response to AI and data related incidents, complaints or disputes, coordinating response across information security, operations and customer teams. /li /ul h3Enablement Communication /h3 ul liRun training and clinics that lift legal and contracting literacy across sales, delivery, AI and partnership teams. /li liBring people together across geographies and disciplines to land negotiation positions and unblock deals. /li liProduce high‑quality written content — playbook entries, position papers, customer‑facing legal materials, internal briefings. /li /ul h3Skills Knowledge and Expertise /h3 h3Required /h3 ul liQualified lawyer in a relevant jurisdiction (UK solicitor, Spanish abogado, French avocat or equivalent). /li liAble to work autonomously (3‑5 years PQE). /li liFluent in English and either French or Spanish. Working proficiency in all three is a strong advantage. /li liDemonstrable experience drafting and negotiating btechnology /b, software, SaaS or services contracts in a B2B / enterprise setting, including AI‑specific terms and closely adjacent ones (data protection, DORA, EBA). /li liStrong working knowledge of the EU AI Act and a clear understanding of how risk classification, obligations and timelines translate into contractual and legal positions. /li liAwareness of the GDPR, as well as local data protection laws such as LOPDGDD/Loi Sapin II/UK GDPR, Data Use and Access, etc. (depending on location). /li liAwareness of AI‑specific risks and how to allocate them contractually. /li liUnderstanding of core principles of modern AI to allow you to negotiate credibly with technical counterparts and write contractual language that reflects how AI systems behave. /li liHands‑on experience using AI tooling for professional purposes, such as using AI co‑work / copilots to draft, review, redline, analyse and accelerate your own output. /li liFamiliarity with ISO/IEC 42001, ISO/IEC 27001 and SOC 2 Type II at the level needed to align contracts and customer commitments to certification posture. /li liExcellent written and verbal communication. Able to draft a precise contractual clause, run a negotiation, brief a customer's counsel and write a relevant internal note. /li liAbility to run meetings, bring groups together and drive outcomes across geographically dispersed teams and different business functions. You are comfortable in a high‑pace, multi‑stakeholder environment. You are motivated and able to build effective working relationships across cultures and time zones. /li liA passion for raising the bar in others. You will deliver training and coaching, enabling and growing legal/commercial literacy across the organisation. /li /ul h3Desirable /h3 ul liIn‑house experience in a technology, SaaS, AI, contact‑centre or consulting business. /li liDirect experience negotiating with hyperscalers and AI platforms (Microsoft, Google, AWS, Anthropic, OpenAI, Cognigy and similar). /li liExperience supporting customer audits, working with certification bodies and managing regulator engagement on legal matters. /li liExposure to IP licensing, open‑source compliance or content rights. /li liFamiliarity with Microsoft Copilot, Microsoft Cowork and the broader Microsoft AI ecosystem. /li /ul h3Nice to Have /h3 ul liPrior career stage in private practice technology / commercial / data / regulatory team(s) before moving in‑house. /li liFamiliarity with NIST AI RMF, UK AI regulatory developments, or sector‑specific AI guidance (financial services, healthcare, public sector). /li liA track record of writing articles or giving talks on AI law, responsible AI, data protection or technology contracts. /li /ul h3Location Working Pattern /h3 pThis role can be office or home based in any of: /p ul libSpain /b – able to travel easily to Madrid /li libFrance /b – able to travel easily to Paris /li libUK /b – able to travel easily to London or Glasgow /li /ul pSabio is a geographically dispersed organisation, so you'll be comfortable working with colleagues across multiple locations and the nuances of different cultures and working styles. Occasional travel between Sabio locations and to customers should be expected. /p h3Benefits /h3 pThis is your chance to join and friendly and passionate team that will motivate you to learn and develop your career in the company. /p ul liPension Scheme /li liRemote/Flexible work /li liLife insurance /li liPrivate health /li liPlus many more! (Benefits are dependant on your base location.) /li /ul h3The Small Print /h3 pStrictly No Agencies; any submission of resumes without prior request from Sabio Group will not be deemed as an introduction and therefore will not warrant an introduction fee. All applicants must have the right to work in the territory to which the role relates (UK EU). Sabio Group are unable to offer sponsorship on any roles advertised. /p /p #J-18808-Ljbffr