EU remote
Legal Lead Analyst
About this role
Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company.We believe work should be fulfilling, inspiring, and balanced.
Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. Join us in redefining the future of wellbeing! We are hiring an Compliance & Privacy Legal Specialist in Europe to work closely with our Global Legal team and our Data Protection Officer! You will be a member of Wellhub' global Legal team, and your primary responsibility will be to support the development and implementation of Wellhub' global data protection and privacy programs, including compliance with data protection regulations such as the EU’s General Data Protection Regulations (GDPR), the California Consumer Privacy Act (CCPA) and the EU AI Act.
YOUR IMPACT Lead critical risk and privacy operations, partnering strategically with global Legal colleagues and key business stakeholders across the US, EU, and LATAM. Experience in the healthcare industry preferred but not required Strategic Governance & AI Frameworks: Oversee and continuously evolve our privacy, data protection, and AI governance strategy in alignment with global regulatory standards. High-Impact Risk Assessments: Apply expert legal and regulatory judgment to evaluate Data Protection Impact Assessments (DPIAs) and AI Risk Assessments, identifying nuanced compliance gaps and structuring actionable risk mitigation strategies.
Horizon Scanning & Analysis: Utilize AI-driven monitoring to stay ahead of evolving global privacy laws and AI regulations, translating changes into strategic guidance for leadership. Vendor Risk Determination: Direct data protection due diligence for third-party vendors processing personal data, establishing risk tolerances and legal requirements on behalf of Wellhub by leveraging AI-assisted processes. Privacy-by-Design & Responsible AI Advisory: Serve as a core advisor to product, security, and engineering teams, ensuring privacy-by-design and ethical AI principles are embedded across all new initiatives.