Legal Counsel - IT & Data Protection

Hi, we’re AMBOSS and we’re searching for a Legal Counsel to support our business in IT & Data Protection matters!

About AMBOSS

AMBOSS is the copilot for medical professionals, empowering them to provide the best possible care through our learning and clinical decision support tool. Our team brings together care, innovative thinking, and cutting-edge AI medical technology. Our founders launched AMBOSS in 2012 with the goal of creating a tool they wished they had during medical school and clinical practice. Since then, we've grown to over 600 employees and are active in over 180 countries - primarily in Germany and the US. Our offices are located in Berlin, Cologne, New York, Cagliari and Cape Town.

Want to learn more about our culture? Watch our video to explore what makes us unique

Why can this position be exciting for you?

In this role, you will be the core link between regulatory requirements and day-to-day operations. By partnering in early stages with product and engineering teams, you turn complex privacy rules – including emerging AI frameworks – into straightforward, actionable guidance that keeps projects moving forward & safely. From streamlining vendor reviews and data subject requests to mapping risks across our systems, your work lead to practical processes, ensuring AMBOSS expands into new markets with scalable compliance already built in.

You will:

• Be a trusted data protection advisor for our teams. You partner with product and engineering from concept to launch, including on [AI-based features / new markets]. You give clear, pragmatic recommendations.

• Own data protection risk assessment across our systems and processes. You identify, assess and prioritise compliance risks and turn them into practical frameworks that teams can use.

• Keep us ahead of international requirements. You track data protection and related regulation in our markets, including AI-related rules, and turn them into pragmatic solutions for AMBOSS.

• Make vendors, tools and contracts easy to get right. You review and negotiate data processing agreements and assess new software and vendors, so the business gets fast, reliable answers.

• Build and improve our data protection operations. You own our policies, the record of processing activities and the handling of data subject requests (access, rectification, erasure). You simplify, standardise and automate wherever possible.

• Work as one team. You collaborate closely with our DPO, the General Counsel and the wider Legal team, and bring in external input when it makes sense.

You bring:

• Legal qualification (Diploma; 1st state exam, LLM or international equivalent)

• At least 4 years of experience in IT law and data protection at a law firm or in-house, with a clear track record of giving practical, decision-ready advice to a diverse range of stakeholders

• Strong working knowledge of GDPR and how to apply it pragmatically in a product environment

• Prior experience working alongside engineering, product, and technical teams to translate complex legal, regulatory, and compliance requirements into actionable product features, technical specifications, and workflows

• Technical curiosity: you enjoy understanding how systems and data flows work

• A pragmatic interest in AI and legal technology, and ideally experience using these tools to work faster and more effectively

You enjoy:

• A diverse Legal Portfolio: Drive a fast-evolving mix of IT legal matters, data protection frameworks, and commercial advisory

• Uncharted legal territory: High-stakes regulatory challenges and emerging tech questions where the playbook hasn't been written yet

• High autonomy, real impact: Move past "no" to craft actionable, business-enabling solutions with complete ownership of your domain

• Continuous Improvement: Disrupt outdated legal workflows and refine our operational baseline for scale

• A humorous and high-performing team :)

Benefits:

AMBOSSians tell us that innovative work keeps them energized and employee benefits help them to feel appreciated and empowered. We invest in every AMBOSSian with our employee benefits package, crafted to support financial, physical, and mental health, and work-life harmony.

🌴 Rest & Time Off (30 paid vacation days, AMBOSS holiday, personal purpose day and more)

🥙Food & Office Comfort (Daily healthy breakfast & lunch by in-house chef in Berlin HQ, AMBOSS daycare, work remotely from other office spaces in Cologne, Sardinia, Cape Town)

🏃 Health, Fitness & Mobility (Urban Sports Club -M plan- , Fitbit Versa 3, Deutschland Ticket…)

Check out the full list of benefits below:

https://go.amboss.com/the-amboss-prescription-de

We believe that diversity is a powerful driver of innovation and progress. That’s why we are committed to fostering an inclusive, respectful, and supportive environment where everyone—regardless of gender, age, ethnic or cultural background, religion, disability, sexual orientation, gender identity—is valued and given equal opportunity to thrive. We warmly welcome people of all backgrounds to help us fulfil our mission: empowering all medical professionals to provide the best possible care 🩺

Even if you don’t meet every single point in the job description, we still encourage you to apply. We’d love to hear from you!