Data Privacy Associate Manager

At Aleph, we're committed to ensuring that all of our customers' and partners' data is protected and that our work complies with data protection legislation across the markets we operate in - including as AI regulation reshapes that landscape. We're looking for an experienced Data Privacy Associate Manager (or Manager, depending on experience), to join our global team and help manage sensitive information, support contract preparation, carry out data protection assessments, and advise on the growing intersection of AI governance and privacy compliance across our global footprint.

What You Will Do

• Organize and maintain data protection records and related documentation at a global level.
• Support the preparation of contracts with business partners and other legal documents (for example, internal policies) in the field of data protection and GDPR compliance.
• Carry out Data Protection Impact Assessments (DPIAs) together with the wider team.
• Advise on and support the practical implementation of legal requirements across all AI risk categories (e.g., under the EU AI Act - prohibited, high-risk, limited-risk, and minimal-risk systems), including risk classification, compliance obligations, and coordination with product and tech teams.
• Monitor emerging AI regulations more broadly and advise on their intersection with data protection across our markets.
• Advise the business on responsible AI governance and internal AI use policies.
• Advise, coordinate, and support colleagues across the business on data protection and privacy compliance issues, including in non-EU markets.
• Collaborate on internal audits at Aleph Group level in the field of data protection.
• Help prepare reports, presentations, and educational materials on data protection, privacy, and AI compliance topics.
• Participate in data protection, privacy, and AI-related legal projects.
• Promote a strong culture of data protection and responsible AI compliance across Aleph.
• Take on other ad hoc legal and compliance-related tasks as needed.

What We Are Looking For

• A degree in Law.
• Minimum 4-6 years of hands-on experience in data privacy and compliance, with a strong focus on GDPR - this is not an entry-level role.
• Solid expertise in data privacy laws and practices, including a deep understanding of GDPR.
• Hands-on experience completing legal/compliance requirements for the implementation of AI systems across all risk categories (e.g., under the EU AI Act), including but not limited to high-risk systems - this is a requirement, not just a plus.
• Working knowledge of AI-related legal and regulatory frameworks more broadly.
• Demonstrated ability to research and apply data privacy requirements in non-EU markets (LATAM, APAC, and/or MEA), given our global operating footprint.
• Proficient English communication skills, written and verbal - this is a must.
• A tech-oriented mindset, genuine curiosity about how AI and emerging technologies intersect with privacy law, and strong motivation to continuously learn new legal frameworks and compliance tools.
• Experience working in a global or regional setting, with the ability to operate confidently outside a single-market (EU-only) focus.

Why Join Aleph

• Shape data protection and AI governance practice at scale: your work will directly protect the trust of Aleph's customers and partners across a global footprint spanning Europe, LATAM, APAC and MEA.
• Apply AI compliance expertise at scale: you'll drive real implementation work across the full spectrum of AI risk categories as regulation matures, not just policy-watching.
• Build deep expertise fast: exposure to DPIAs, cross-border data transfers, AI risk assessments, and multi-jurisdictional privacy frameworks gives you a faster path to becoming a recognized privacy expert than most single-market roles.
• Join a growing, collaborative legal team based in Warsaw that values mentorship and hands-on learning over hierarchy.