Legal and Privacy Specialist – AI Factory project (fixed term - 24 months)

LNDS is a key partner in the project “Luxembourg AI Factory” co-financed by the European Union under the EuroHPC joint undertaking. In this project, LNDS is leading the development of services related to data access and reuse facilitation, as well as supporting regulatory compliance readiness of AI innovation within Luxembourg.

As a Legal and Privacy Specialist, you will be part of the Ethical, Legal and Social Implications (ELSI) team and your role will focus on the development and delivery of services in the AI Factory project related to regulatory guidance of the EU AI Act, training and support. You will also advise on the data protection requirements, compliance with other related legislations and other challenges that need to be addressed as part of the operations and services of our organisation. 

• Analysis and interpretation of legal and/or ethical requirements based on legal and ethical norms, review of existing guidelines and, where applicable, case law. The main thematic focus of this work will be on the legal, regulatory, and ethical challenges relating to the secondary use of data and machine learning applications, in particular Artificial Intelligence (AI) systems.
• Drafting and reviewing written reports and other project deliverables.
• Conducting privacy and data protection assessments to evaluate the project’s compliance and identify potential areas for improvement.
• Offering expert advice on data governance, data mapping, responsible AI, privacy by design, technical and security measures.
• Collaborating with cross-functional teams to integrate privacy considerations into business processes, products and services offered by LNDS within the scope of the AI Factory.
• Development of practical tools, templates, guidance, training and other instruments for ELSI compliance.
• Analysis of the legal landscape on national and EU Level where relevant for LNDS’ service in the AI Factory, in particular for secondary use of data, data security, AI Act compliance and other legal standards.

• Overall experience of 5 to 10 years with relevant experience in privacy, technology, data & IP law with a consulting company, law firm, technology company or research entity.
• Master’s degree in law, specialisation in European laws (EU AI Act, GDPR), technology, digitalisation and IP law is considered a strong plus.  
• Good knowledge of and experience in conducting AI and data protection impact/risk assessments and advising on key regulatory frameworks such as the GDPR and EU AI Act.
• Proven work experience with challenges related to data protection by design and default in the development of products and services.
• Ability to translate legal advice into practical recommendations for new products and services and in collaboration with an information security team.
• Excellent communication and interpersonal skills (ability to listen, understand and convey your ideas) and the ability to articulate clearly legal obligations to various audiences (scientists, clients, internal colleagues, …) both in written and oral forms. 
• Experience in writing academic or policy papers focused on the ethical/legal aspects of AI is a strong plus.
• Ability to work independently and collaboratively in a fast-paced environment.
• Creative, solution-oriented with strong analytical skills and a mindset for quality.
• Critical thinking, adaptable, flexible and able to accept and manage changes in the workplace.
• Cultural intelligence and diversity consciousness.
• Conscientious about time management (becoming more effective and efficient in how you work).
• Familiarity with Agile methodologies and project management software such as collaboration tools commonly used in tech environments (e.g., Confluence, Jira, Slack, …).
• Proficient in English.
• Proficient in French.