Legal Counsel

We’re seeking a seasoned Lawyer with at least 4 years of experience in law firms or as in-house counsel who brings a genuine passion for Cybersecurity and IT law.

This is a high-impact individual contributor role where you’ll own all aspects of legal support for our technology-driven business. 

If you’re energized by cutting-edge technology, eager to shape the legal contours of our cybersecurity offerings, and ready to make a tangible impact, we’d love to meet you.

Responsibilities:

• Negotiating SaaS agreements with customers, both from a legal and a compliance perspective. Being Cleafy a SaaS vendor, a strong knowledge of cloud computing, SaaS agreements and applicable EU regulations (GDPR, DORA) is essential.
• Preparing and reviewing contracts with suppliers and partners, as well as internal corporate documentation (BoD minutes, etc.).
• Reviewing contracts with potential investors and assisting the Company in M&A transactions (previous experience with M&A matters and data rooms will be considered a plus).
• Assisting the company in reaching compliance with the main current EU regulations applicable to Cleafy (at least minimum knowledge of NIS2, Whistleblowing Law, Law 231/2001 and AI ACT is required).
• Reviewing and updating the Company's privacy documentation (Record of processing activities, DPIA, LIA, TIA, appointment of external controller, etc.). Preparing and training employees on Cleafy's contract standards and GDPR.
• Assisting the Cleafy Security Team during the annual ISO27001 and SOC2 type II certification processes (at least minimum knowledge of ISO27001 and SOC2 type II international standards is essential);
• Assisting others Cleafy’s teams: (i) in developing and implementing new product/service features, in compliance with the principles of Privacy & Security by Design, (ii) preparing and reviewing Company Policies and (iii) managing RFPs with potential customers (previous experience in dealing with RFPs is considered a plus);
• Maintaining an up-to-date knowledge of Italian and EU legislations, regulatory guidances and/or compliance frameworks, as well as jurisprudence of both the Italian and the Supreme Court, protecting the Company from potential non-compliance.

Must have:

• Master’s degree in Law
• Admitted to the practice of law (Bar Exam) with minimum 4 years of experience as in-house legal counsel or in major law firms
• Ability to assess risks and critical issues arising from contractual frameworks and to negotiate autonomously SaaS contracts with customers
• Strong knowledge of Italian Civil Code, GDPR, Italian Privacy Code, Italian Data Protection Authority and EDBP Guidelines and Opinions, DORA regulation
• Strong interpersonal and communication skills in order to manage conversations with the Company’s stakeholders
• Skilled in using devices with iOS and macOS operating systems
• Fluent in English

Nice to have:

• Previous experience within IT, SaaS companies, or banks is a plus
• Basic knowledge of Bankit 285 and banking applicable laws and circulars (previous experience with banking-related contracts will be considered a plus)
• Basic knowledge of AI Regulation, Law 231/2001, Law Decree 24/2023
• Spanish is a plus

• Hybrid or Remote job, you choose!
• Area-specific benefits package
• Work-life balance enhancement policies
• Personalized support and career plan to accelerate your professional growth
• Latest technologies and international environment

Working at Cleafy means being part of a group of people who support, respect, and inspire one another, no matter what.

That's why we have been certified by Great Place to Work® (find our page on bit.ly/BestWorkplace-Cleafy).

Your adventure begins here. 

Are you ready to embrace the challenge?

Cleafy is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any kind. Our company is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Cleafy are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, age, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.