← All roles

AI Tech and Data Privacy Associate Manager

Aleph Holding· Staff – Legal
Apply on company site
Hybrid (Bucharest)Full-timePosted 1mo ago

About the role

Legal role focusing on AI governance, data protection, and privacy compliance across Aleph’s global footprint, with emphasis on GDPR, AI Act implications, and cross-border data projects.

Responsibilities

  • Advise on and support the practical implementation of legal requirements across all AI risk categories (e.g., under the EU AI Act — prohibited, high-risk, limited-risk, and minimal-risk systems), including risk classification, compliance obligations, and coordination with product and tech teams.
  • Monitor emerging AI regulations more broadly and advise on their intersection with data protection across our markets.
  • Advise the business on responsible AI governance and internal AI use policies.
  • Advise, coordinate, and support colleagues across the business on data protection and privacy compliance issues, including in non-EU markets.
  • Collaborate on internal audits at Aleph Group level in the field of data protection.
  • Help prepare reports, presentations, and educational materials on data protection, privacy, and AI compliance topics.
  • Participate in data protection, privacy, and AI-related legal projects.
  • Promote a strong culture of data protection and responsible AI compliance across Aleph.
  • Support AI-related technology projects, including API integrations with third-party AI providers, ensuring data protection, IP, and contractual compliance throughout implementation.
  • Negotiate and draft agreements related to AI/technology procurement (vendor contracts, API and data-sharing agreements, licensing terms), including IP protection, ownership, and indemnification provisions.
  • Coordinate with product, tech, and other teams to assess IP, confidentiality, and data protection risks before onboarding new AI tools or vendors.
  • Organize and maintain data protection records and related documentation at a global level.
  • Support the preparation of contracts with business partners and other legal documents (for example, internal policies) in the field of data protection and GDPR compliance.
  • Carry out Data Protection Impact Assessments (DPIAs) together with the wider team.
  • Take on other ad hoc legal and compliance-related tasks as needed.

Qualifications

  • A degree in Law.
  • Minimum 4–6 years of hands-on experience in data privacy and compliance, with a strong focus on GDPR.
  • Solid expertise in data privacy laws and practices, including a deep understanding of GDPR.
  • Hands-on experience completing legal/compliance requirements for the implementation of AI systems across all risk categories (e.g., under the EU AI Act).
  • Working knowledge of AI-related legal and regulatory frameworks more broadly.
  • Demonstrated ability to research and apply data privacy requirements in non-EU markets (LATAM, APAC, and/or MEA).
  • Proficient English communication skills, written and verbal.
  • Tech-oriented mindset and motivation to learn new legal frameworks and compliance tools.
  • Experience working in a global or regional setting.
  • Practical experience negotiating and drafting technology/AI related agreements (vendor contracts, API and data-sharing agreements, licensing terms), including IP protection, ownership, and indemnification provisions.

Skills

Required:GDPRData Protection Impact Assessments (DPIAs)AI regulatory frameworks (EU AI Act)Contract drafting and negotiation (vendor contracts, API/data-sharing agreements)Cross-border data protection
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Aleph Holding

Aleph is making digital advertising accessible around the world

A leading global enabler of digital advertising in emerging countries

digital advertisingemerging marketstechnologypaymentssolutions

More open roles at Aleph Holding