Privacy, AI Governance & Digital Compliance Legal Director

Location: Spain; Bulgaria; UK; Ireland

The Global Privacy AI Governance & Digital Compliance Director is responsible for the dormakabas global privacy and digital governance framework. The position combines strong data privacy expertise (GDPR and beyond) with responsibility for interpreting and operationalising new regulatory frameworks such as the EU AI Act Cyber Resilience Act Data Act and NIS2. The role focuses on endtoend privacy program management AI and digital compliance oversight regulatory readiness crossfunctional advisory support and the development of internal policies tools and capabilities that enable responsible innovation.

This position combines legal expertise technology fluency operational rigor and strategic leadership to drive accountability transparency and ethical compliance across dormakabas global products systems and commercial operations.

• Serve as a key member of dormakabas Global Data Privacy Office and Global Group DPO shaping enterprise-wide privacy and digital compliance strategy.
• Deliver strategic legal advise across global privacy regimes including GDPR in EU and UK CCPA in California and additional U.S. state privacy laws PIPEDA in Canada LGPD in Brazil PIPL in China and other evolving international data privacy frameworks.
• Lead privacy-by-design initiatives data governance assessments vendor risk evaluations and complex data-handling queries across product engineering procurement and operations.
• Develop implement and maintain internal policies controls templates training programs and operational tools.
• Serve as Data Protection Officer (DPO) where required by local laws. Oversee and monitor dormakabas compliance with global data privacy requirements and continuously adapting the organizations privacy frameworks to evolving regulatory standards.

• Drive the development implementation and maturity of dormakabas AI Governance Framework.

• Monitor and translate evolving AI requirements (e.g. EU AI Act and AI US state laws) into actionable guidance for engineering data science and product teams.
• Support AI risk assessments conformity assessments technical documentation creation and compliance efforts for highrisk or enterprise AI systems.
• Lead training and awareness programs on AI regulatory ethical and governance standards.

• Advise on regulatory obligations related to Cyber Resilience Act NIS2 the Data Act and other emerging frameworks.
• Provide legal support to ensure secure compliant and resilient technology systems and development processes.
• Support digital compliance initiatives across dormakabas global product and operational landscape.

• Serve as the privacy AI and digital compliance subject-matter expert in dormakabas vendor management processes.
• Advise on draft and negotiate DPAs security addendums AIrelated contractual terms and complex commercial technology agreements.
• Work closely with procurement legal teams to balance commercial priorities with regulatory and security requirements.
• Engage with enterprise clients external advisors partners and internal stakeholders worldwide.

• Advise on strategic digital AI data and technology initiatives.
• Lead or support crossdormakaba programs training initiatives and legal operations improvements.
• Monitorandassesstheevolvingregulatorylandscapeforprivacy AI and digitalcomplianceglobally.
• Lead coordinate and manage ad-hoc projects and tasks within privacy AI and digital compliance.
• Manage external counsel where required.

• 712 years of experience in working with and advising on privacy technology law digital compliance cyber security and commercial legal matters in a reputable law firm and/or an in-house role in a company with significant data handling activities.
• Deep expertise advising on (i) multinational privacy regimes (e.g. GDPR CCPA PIPL LGPD) and (ii) emerging digital regulations (EU AI Act Cyber Resilience Act Data Act NIS2 etc.).
• Masters degree in Law and admission to a bar in home jurisdiction(civil law or common law).
• Certifications such as IAPP CIPP/E CIPM or AIGP are highly advantageous.
• Fluency in English.
• High proficiency withMicrosoft 365 tools(Excel SharePoint Forms PowerPoint) and openness to learning new platforms.
• Strong analytical organizational and communication skills.
• Ability to work independently in a fast-paced global environment.

• Background negotiating complex crossborder commercial technology agreements.
• Experience working closely with technical teams (engineering cybersecurity data science).
• Additional European or APAC languages.

• Highly operational with astrategic mindset.
• Builder mentality comfortable creating structure and processes from the ground up.
• Data-driven pragmatic and solutions-oriented.
• Effective partner to Legal Product Development IT and business teams.
• Resilient and effective in a high-growth high-expectation environment.
• Teamoriented collaborative and committed to continuous learning.

• Health insurance
• Flexible remuneration (childcare ticket transport ticket restaurant ticket)
• Flexible schedule
• Remote working days

We are at the heart of every place that matters. From automatic doors to cloud-based access management as a leading global provider in the access solutions market for schools banks airports hospitals hotels and many more we enable seamless movement within secure safe and sustainable places. With over 160 years of experience and a focus on excellence and innovation we offer exciting opportunities to grow in an environment where you can make a real impact. At dormakaba you are encouraged to take initiative develop your skills and build your career alongside 16000 experts worldwide who are setting industry standards every day.

Work in a place where you matter apply now!

At dormakaba we are proud to be an equal opportunity employer. We are firmly committed to creating a diverse and inclusive work environment where all individuals are treated with respect and dignity. We actively promote equal employment opportunities.

#LI-YC1