About Aleph
At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies. Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact.
Role Overview
At Aleph, we're committed to ensuring that all of our customers' and partners' data is protected and that our work complies with data protection legislation across the markets we operate in — including as AI regulation reshapes that landscape. We're looking for an experienced AI Tech and Data Privacy Associate Manager (or Manager, depending on experience), to join our global team and help manage sensitive information, support contract preparation, carry out data protection assessments, and advise on the growing intersection of AI governance and privacy compliance across our global footprint.
Responsibilities
- Advise on and support the practical implementation of legal requirements across all AI risk categories (e.g., under the EU AI Act — prohibited, high-risk, limited-risk, and minimal-risk systems), including risk classification, compliance obligations, and coordination with product and tech teams.
- Monitor emerging AI regulations more broadly and advise on their intersection with data protection across our markets.
- Advise the business on responsible AI governance and internal AI use policies.
- Advise, coordinate, and support colleagues across the business on data protection and privacy compliance issues, including in non-EU markets.
- Collaborate on internal audits at Aleph Group level in the field of data protection.
- Help prepare reports, presentations, and educational materials on data protection, privacy, and AI compliance topics.
- Participate in data protection, privacy, and AI-related legal projects.
- Promote a strong culture of data protection and responsible AI compliance across Aleph.
- Support AI-related technology projects, including API integrations with third-party AI providers, ensuring data protection, IP, and contractual compliance throughout implementation.
- Negotiate and draft agreements related to AI/technology procurement (vendor contracts, API and data-sharing agreements, licensing terms), including IP protection, ownership, and indemnification provisions.
- Coordinate with product, tech, and other teams to assess IP, confidentiality, and data protection risks before onboarding new AI tools or vendors.
- Organize and maintain data protection records and related documentation at a global level.
- Support the preparation of contracts with business partners and other legal documents (for example, internal policies) in the field of data protection and GDPR compliance.
- Carry out Data Protection Impact Assessments (DPIAs) together with the wider team.
- Take on other ad hoc legal and compliance-related tasks as needed.
Why Join Aleph
- Shape data protection and AI governance practice at scale: your work will directly protect the trust of Aleph's customers and partners across a global footprint spanning Europe, LATAM, APAC and MEA.
- Apply AI compliance expertise at scale: you'll drive real implementation work across the full spectrum of AI risk categories as regulation matures, not just policy-watching.
- Build deep expertise fast: exposure to DPIAs, cross-border data transfers, AI risk assessments, and multi-jurisdictional privacy frameworks gives you a faster path to becoming a recognized privacy expert than most single-market roles.
- Join a growing, collaborative legal team based in Warsaw that values mentorship and hands-on learning over hierarchy.
- A degree in Law.
- Minimum 4–6 years of hands-on experience in data privacy and compliance, with a strong focus on GDPR — this is not an entry-level role.
- Solid expertise in data privacy laws and practices, including a deep understanding of GDPR.
- Hands-on experience completing legal/compliance requirements for the implementation of AI systems across all risk categories (e.g., under the EU AI Act), including but not limited to high-risk systems — this is a requirement, not just a plus.
- Working knowledge of AI-related legal and regulatory frameworks more broadly.
- Demonstrated ability to research and apply data privacy requirements in non-EU markets (LATAM, APAC, and/or MEA), given our global operating footprint.
- Proficient English communication skills, written and verbal — this is a must.
- A tech-oriented mindset, genuine curiosity about how AI and emerging technologies intersect with privacy law, and strong motivation to continuously learn new legal frameworks and compliance tools.
- Experience working in a global or regional setting, with the ability to operate confidently outside a single-market (EU-only) focus.
- Practical experience negotiating and drafting technology/AI related agreements (vendor contracts, API and data-sharing agreements, licensing terms), including IP protection, ownership, and indemnification provisions.
