We’re looking for an Associate Legal Counsel to join our Legal team and take ownership of regulatory compliance at Staffbase. You’ll work across a broad docket - supporting commercial and corporate matters alongside the rest of the team - but your primary focus and area of ownership will be building and running our compliance program: navigating an expanding regulatory landscape (including NIS2, the Cyber Resilience Act, the EU AI Act, and global data protection laws), driving new certifications (including ISO 27701), and keeping our policies, training, and risk assessments current. You’ll also have real latitude to modernize how we do this work, using AI to make compliance faster and more scalable - not more paperwork-heavy.

What you’ll be doing

• Closely collaborate with the Head of Legal to drive Staffbase’s regulatory compliance program end to end - tracking obligations and driving implementation across regulations including NIS2, the Cyber Resilience Act, the EU AI Act, and global data protection laws
• Lead the roadmap for new and renewed certifications (e.g. ISO 27001), coordinating with Security, Product, and other teams to prepare for audits
• Draft, maintain, and update internal policies on a defined review cycle, keeping them current as regulations evolve
• Design and run compliance risk assessments on a consistent schedule, and track remediation through to closure
• Build and deliver company-wide compliance training programs
• Champion the use of AI to streamline compliance work - from regulatory monitoring and policy drafting to risk tracking and reporting - and bring your own ideas for where automation can replace manual process
• Support commercial and corporate legal work alongside the wider Legal team, including customer contract review, procurement agreements, and corporate governance matters
• Independently monitor the regulatory landscape and translate new developments timely into practical guidance for the business
• Partner cross-functionally with Security, IT, People, and Product teams to embed compliance requirements into day-to-day operations

What you need to be successful

• Fully qualified lawyer - 2nd State Exam in Germany, or an equivalent qualification from another EU jurisdiction
• Based in Germany, with fluency in German and English (C1 minimum)
• Clear, confident communicator, able to translate regulatory requirements into practical guidance for non-lawyers
• Authentically and deeply tech-savvy - you don’t just tolerate AI and legal automation, you actively seek it out, champion it, and have a clear vision for where it can take a legal and compliance function
• Strong ownership mentality and comfort running a program independently with support from the Head of Legal
• Excellent attention to detail and a structured, process-driven approach to recurring compliance work
• Genuine interest in - and some exposure to - commercial or corporate legal work, with willingness to support deals and procurement as capacity allows

What you'll get

• Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
• Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
• Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
• Support - we offer offering a company pension scheme
• Volunteers Day - you’ll get one day off per year for supporting a social project