Why Work at Lenovo
Description and Requirements
We are looking for a motivated and detail-oriented Privacy Counsel to join our growing global privacy team. Based in Europe, this role will play a key part in supporting the legal and privacy function by helping ensure compliance with the EU GDPR, NIS2 Directive, Digital Operational Resilience Act and other applicable data protection laws across the region. You will collaborate with senior privacy counsels and cross-functional teams to provide legal support to local stakeholders, review data processing agreements, assist with the key privacy operations (such as ROPA, TIAs, PIAs, DSRs, etc.) and help implement our global privacy program. You will also collaborate with other regional privacy counsels on assigned global initiatives or on adapting projects for local implementation in different regions.
Key Responsibilities
- Assist senior privacy counsels in advising internal stakeholders on GDPR compliance and broader data protection matters across Europe.
- Review, draft, and negotiate data protection agreements (DPAs) and privacy clauses in commercial contracts.
- Help conduct and document data protection impact assessments (DPIAs) and legitimate interest assessments (LIAs).
- Maintain documentation and records of processing activities (ROPAs) and assist with audits and compliance assessments.
- Monitor and track legal and regulatory developments in European privacy and cybersecurity laws.
- Respond customers’ questions and RFPs with respect to our privacy compliance practice.
- Support the creation and delivery of privacy training and awareness materials to internal teams.
- Assist in the implementation and enforcement of internal privacy policies and procedures in coordination with the global privacy team.
- Assist senior privacy counsels to conduct legal research in order to handle data incidents.
- Work closely with teams including Security, Procurement, Product, HR and Marketing to embed privacy-by-design principles in operations and systems.
- Collaborate with other regional privacy counsels to localize global privacy initiates.
What do you need to succeed in this opportunity
- Law degree and qualification to practice in at least one EU or EEA jurisdiction.
- 8 years of experience in a legal or privacy-focused role, ideally with exposure to technology, SaaS, or multinational companies.
- Strong knowledge of the EU GDPR and familiarity with EU data protection regulatory landscape.
- Strong willingness to learn and research on emerging cybersecurity laws.
- Experience reviewing or negotiating DPAs and working with cross-functional stakeholders.
- Excellent written and verbal communication skills in English.
- Strong attention to detail, ability to multitask, and eagerness to learn in a dynamic legal environment, team spirit
- CIPP/E, CIPM, or other privacy certification is a plus.
- An open and stimulating environment within one of the most forward-thinking IT companies
- Flat structures and fast decision-making processes
- An international team with a high focus on Gender Diversity
- Attractive compensation package
- An international organization with a high focus on all types of Diversity in the team
- 3 sick days per year
- Additional vacation days
- 100% sick leave compensation up to 2 months per year
- A broad selection of soft / hard skills trainings and individual mentoring
- Employer contribution to the Third Pillar Pension System
- Life & life events insurance, fully covered by company