A Legal and Privacy Manager is responsible for overseeing an organization’s compliance with privacy regulations, data protection laws, and internal policies and for general legal advice and support to the business. They work to minimize legal risks, manage privacy-related inquiries, and implement practices to ensure data security. This role involves collaborating with cross-functional teams to develop and enforce policies that protect both the company and its customers’ information.

• Provide legal advice and guidance on international data protection laws and regulations, particularly the GDPR.
• Conduct data privacy risk assessments and provide strategic guidance on compliance to key business functions.
• Manage data privacy incident response and investigations.
• Develop, update, and maintain relevant company policies and legal frameworks related to data privacy.
• Conduct privacy impact assessments (PIAs) and ensure data protection compliance across new projects and initiatives.
• Partner with the IT Security and other cross-functional teams to integrate privacy considerations into new products and services.
• Train and educate employees on data privacy matters.
• Provide general legal counsel and support across a variety of legal areas, including commercial law, intellectual property law, contract management, corporate governance, and regulatory compliance.
• Draft, review, and negotiate a wide range of commercial contracts and agreements, ensuring robust data privacy considerations are included.
• Collaborate with business teams to ensure legal risks are mitigated and legal requirements are integrated into business strategies and operations.
• Support the legal team in managing disputes, investigations, and any potential legal proceedings.
• Stay updated on evolving global legal landscapes.
• Assist in coordinating with external legal counsel where necessary.

• A university degree in law, with strong academic credentials.
• Minimum 3 years of work experience as an in-house attorney or in private practice.
• Strong knowledge and experience in data privacy law, including GDPR compliance. Any Privacy certifications/studies are a strong plus.
• Fluent written and verbal communication skills in English, fluency in other languages is a plus.
• Ability to work independently and as part of a team.
• Strong analytical and problem-solving skills.
• Proactive, practical and solutions-oriented approach.
• Good business understanding.
• Fluency in English

• Exposure to diverse international environment with great organizational culture driven by Togetherness, Spirit and Passion
• Private medical insurance
• Life insurance
• Cafeteria system of benefits (including sport card)
• Incredible Oriflame products – allowance every 3 weeks and discounts for every purchase
• Flexible working time (we can start work between 6:00 and 9:30) and hybrid working model
• Additional 2 holiday days