Data, AI and Privacy Legal Counsel – Group

About the role

Securitas is looking for an experienced Data, AI and Privacy lawyer to join its Data, AI and Privacy Legal Team (DAP Legal Team) and provide dedicated Group-level legal support for units such as Securitas IT, Security Risk Management and Global Clients. The role is the single point of legal contact for privacy, AI and data-governance matters for these strategically important Group functions, and helps shape how the team structures compliance at Group level. The position is open to candidates based in Warsaw, Poland.

Key responsibilities

• Act as the primary DAP legal contact for Group functions, advising on service offerings, enterprise technology deployments, IT governance, cloud and SaaS solutions and AI-driven systems.
• Review and advise on data processing agreements and intra-group data transfers.
• Conduct DPIAs and privacy impact assessments, and lead AI impact assessments for enterprise technology and digital transformation projects.
• Help embed privacy-by-design principles and privacy compliance obligations across Group functions and jurisdictions.
• Advise Global Clients on privacy and AI obligations arising from client agreements and data processing arrangements.
• Contribute to global data and AI governance, AI risk assessment and privacy compliance strategies, and translate regulatory requirements into practical guidance.
• Collaborate with regional DAP Legal Counsels, deliver guidance, training and updates on regulations, and contribute to monitoring, audit and reporting.

Required profile

• Minimum 5 years of experience in a privacy, data protection or technology legal role with substantive GDPR exposure.
• Bachelor's degree in law (privacy or AI law specialization welcome); master's degree preferred.
• Fluency in English.
• Comfortable supporting multiple countries and business units in parallel, and able to work independently.

Required skills

• Deep understanding of the GDPR, the e-Privacy Directive, the EU AI Act and data governance frameworks.
• Hands-on experience across the full privacy workflow, including assessments, data breaches and privacy training.
• Proven stakeholder management across legal, business and technical audiences.
• Good project management and communication skills, and a good working understanding of AI and IT applications.
• Preferred: awareness of the EU Digital Decade package (Data Act, NIS2, DORA), relevant privacy certifications (e.g. CIPP/E) or AI governance certifications (e.g. AIGP), and awareness of U.S. data and privacy laws.

Working conditions and offer

• Hybrid model with 2 days in the office per week, with travel of around up to 4 times per year.
• A formative, highly visible Group-level role shaping the approach to Data, AI and Privacy compliance.