Legal Lead Analyst

At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company.We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. 

We are hiring an Compliance & Privacy Legal Specialist in Europe to work closely with our Global Legal team and our Data Protection Officer!

You will be a member of Wellhub' global Legal team, and your primary responsibility will be to support the development and implementation of Wellhub' global data protection and privacy programs, including compliance with data protection regulations such as the EU’s General Data Protection Regulations (GDPR), the California Consumer Privacy Act (CCPA) and the EU AI Act.

• Lead critical risk and privacy operations, partnering strategically with global Legal colleagues and key business stakeholders across the US, EU, and LATAM.
• Experience in the healthcare industry preferred but not required
• Strategic Governance & AI Frameworks: Oversee and continuously evolve our privacy, data protection, and AI governance strategy in alignment with global regulatory standards.
• High-Impact Risk Assessments: Apply expert legal and regulatory judgment to evaluate Data Protection Impact Assessments (DPIAs) and AI Risk Assessments, identifying nuanced compliance gaps and structuring actionable risk mitigation strategies.
• Horizon Scanning & Analysis: Utilize AI-driven monitoring to stay ahead of evolving global privacy laws and AI regulations, translating changes into strategic guidance for leadership.
• Vendor Risk Determination: Direct data protection due diligence for third-party vendors processing personal data, establishing risk tolerances and legal requirements on behalf of Wellhub by leveraging AI-assisted processes.
• Privacy-by-Design & Responsible AI Advisory: Serve as a core advisor to product, security, and engineering teams, ensuring privacy-by-design and ethical AI principles are embedded across all new initiatives.
• Handle administrative duties related to the preparation, execution, and organization of legal and compliance documents.
• Other tasks may be assigned.

• 5-7+ years of relevant experience in data privacy, compliance, IT audit, or related risk management roles. 
• Foundational understanding of ISO/IEC 27001, ISO/IEC 27701, and/ or ISO/IEC 42001. 
• Law Degree and license to practice law in EEA (preferred); 
• Excellent project management abilities.
• Ability to prioritize and complete multiple tasks in a short period of time.
• Interest in legal, compliance, and privacy matters.

We aim to create a collaborative, supportive, and inclusive space where everyone knows they belong. At Wellhub, we welcome and celebrate your authentic self.

Wellhub is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity or expression, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law.

Our commitment to inclusion also extends to how we recognize and reward our people. We’re proud to be Syndio Fair Pay Certified, reflecting our ongoing dedication to equitable and fair pay practices across our global team. Read more about it here.

Questions on how we treat your personal data? See our Job Applicant Privacy Notice.