Compliance Lawyer

Responsibilities

• Actively contribute to Piano's ongoing compliance efforts, working closely with the Group DPO and the CISO
• Participate in third-party compliance assessments, including DPAs (Data Processing Agreements), DPIAs (Data Protection Impact Assessments), and transfer impact assessments (TIA)
• Maintain rigorous tracking of compliance requirements, managing updates and renewals of required documents (processing records, data protection policies, etc.)
• Support continuous improvement of compliance processes and documentation standards (DPAs, Technical and Organizational Measures - TOMs, etc.)
• Take part in the compliance assessment program (e.g., GDPR certification – Europrivacy)
• Lead and coordinate contractual relationships with Piano's main service providers
• Review, manage and structure key vendor documentation, including contracts and other compliance-related documents, ensuring full alignment with Piano's standards and policies
• Identify and communicate risk assessments
• Coordinate, where relevant, with Piano's internal teams (Legal, Security, Finance, Procurement, etc.) to ensure consistency in negotiations and commitments

Requirements

• More than 7 years' experience in contract review
• At least 1 year of experience in compliance / personal data protection
• Proven expertise in contract management
• Ability to manage multiple entities and comply with legal requirements across different countries
• Advanced risk assessment skills
• Strong analytical and problem-solving skills
• Professional working proficiency in English is required
• Strong organizational skills
• Ability to work independently
• Good understanding of data protection compliance
• Practical knowledge of AI tools and their uses
• Clear and effective communication skills