Legal Lead Analyst

Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company.We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. Join us in redefining the future of wellbeing! We are hiring an Compliance & Privacy Legal Specialist in Europe to work closely with our Global Legal team and our Data Protection Officer! You will be a member of Wellhub' global Legal team, and your primary responsibility will be to support the development and implementation of Wellhub' global data protection and privacy programs, including compliance with data protection regulations such as the EU’s General Data Protection Regulations (GDPR), the California Consumer Privacy Act (CCPA) and the EU AI Act. YOUR IMPACT Lead critical risk and privacy operations, partnering strategically with global Legal colleagues and key business stakeholders across the US, EU, and LATAM. Experience in the healthcare industry preferred but not required Strategic Governance & AI Frameworks: Oversee and continuously evolve our privacy, data protection, and AI governance strategy in alignment with global regulatory standards. High-Impact Risk Assessments: Apply expert legal and regulatory judgment to evaluate Data Protection Impact Assessments (DPIAs) and AI Risk Assessments, identifying nuanced compliance gaps and structuring actionable risk mitigation strategies. Horizon Scanning & Analysis: Utilize AI-driven monitoring to stay ahead of evolving global privacy laws and AI regulations, translating changes into strategic guidance for leadership. Vendor Risk Determination: Direct data protection due diligence for third-party vendors processing personal data, establishing risk tolerances and legal requirements on behalf of Wellhub by leveraging AI-assisted processes. Privacy-by-Design & Responsible AI Advisory: Serve as a core advisor to product, security, and engineering teams, ensuring privacy-by-design and ethical AI principles are embedded across all new initiatives. Handle administrative duties related to the preparation, execution, and organization of legal and compliance documents. Other tasks may be assigned. WHO YOU ARE 5-7+ years of relevant experience in data privacy, compliance, IT audit, or related risk management roles. Foundational understanding of ISO/IEC 27001, ISO/IEC 27701, and/ or ISO/IEC 42001 . Law Degree and license to practice law in EEA (preferred); Excellent project management abilities. Ability to prioritize and complete multiple tasks in a short period of time. Interest in legal, compliance, and privacy matters. WHAT WE OFFER YOU With thoughtful benefits, emotional wellbeing resources, and a culture that empowers you to take ownership of your role and your wellbeing, we create an environment where you can thrive in all dimensions of your life. Our benefits include: WELLHUB: Free Gold membership with access to onsite gyms and studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental wellbeing support, and more! Add up to three family members to your plan, ensuring access to wellness for those who matter most to you. HEALTHCARE: Health insurance. FLEXIBLE WORK: As a Flexible First company, we offer hybrid and remote options to give you the freedom to work in a way that suits you. The model for this specific role ca