SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Helsing is a defence AI company on a mission to protect democracies through technological leadership in AI. This role owns data protection and privacy across Helsing's group of companies, building the privacy framework from the ground up as a core member of the Legal team.
You will be the primary adviser on GDPR, the AI Act, and international privacy regimes, guiding product, engineering, and commercial teams on how personal data is handled in AI model development, training, and deployment. You will establish records, assessments, and policies that maintain compliance across Germany, the UK, France, and new markets as the company expands. Privacy at Helsing is foundational to product design and government trust, not a compliance afterthought.
Day-to-day responsibilities include:
- Building and maintaining Helsing's data protection framework across all entities, including records of processing activities, data protection impact assessments, privacy policies, and breach response processes
- Advising product and engineering teams on privacy-by-design, training-data governance, international data transfers, and the interplay between GDPR and the AI Act, translating regulation into practical guidance
- Drafting, reviewing, and negotiating data processing agreements, joint controller agreements, and privacy clauses in commercial and government contracts
- Partnering with Data Protection Officers and external DPOs across jurisdictions, handling data subject requests, and serving as the contact with supervisory authorities
- Delivering privacy training across the organization and supporting M&A, procurement, and new market entry with data protection due diligence
The company operates in a highly specialized domain with unique technical requirements, robustness, safety, and ethical considerations at the forefront. Helsing has already secured multiple significant government contracts and is at the forefront of defence AI innovation.
REQUIREMENTS:
- Fully qualified lawyer (2. Staatsexamen or equivalent in another jurisdiction)
- Demonstrated experience advising technology or AI organizations on GDPR in practice, including privacy-by-design, data governance, and international transfer mechanisms
- Experience drafting and negotiating data processing agreements and IT contracts, either in a law firm or in-house
- Ability to translate complex regulatory requirements into clear, pragmatic advice that non-legal colleagues can act on
- Fluent English communication with judgment to balance regulatory rigor and commercial pace in sensitive government and defence contexts
NICE TO HAVE:
- Experience advising on emerging digital regulation such as the AI Act, NIS2, and DORA, or additional legal qualifications (LL.M or Dr. iur)
- Comfortable working in German as well as English, given the European footprint
