Privacy Legal Counsel

At Nord Security, we’re creating a safer cyber future.

We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel—our teams turn complex problems into solutions trusted by millions worldwide.

Life is online. In this role, you’ll help people own it.

We are looking for a Privacy Legal Counsel who combines strong legal expertise with commercial judgment, systems thinking, and a genuine and hands-on interest in technology. In this role, you will be a strategic partner to Nord Security Product, Risk, Security, and other business teams, helping them navigate privacy and data protection requirements while creating scalable ways of working that support business growth.

This is more than a traditional advisory role. You will help build practical frameworks, processes, and guidance that enable teams to design, launch, and improve products across multiple markets while managing legal and reputational risk. You will also monitor legal, regulatory, and market developments, and translate them into clear, actionable advice for the business.

Main Responsibilities

Advise Product, Risk, Security, and other business teams on privacy, data protection, and related regulatory matters across multiple jurisdictions

Provide practical, commercially minded advice that balances legal risk, user trust, speed of execution, and business goals

Support and continuously improve Nord Security’s privacy compliance program, including internal policies, procedures, and frameworks

Support product development and feature launches, helping teams embed privacy requirements into products and processes from the outset

Advise on user-facing privacy matters, including privacy notices, consent and transparency requirements, data subject rights, privacy assessments, and international data transfers

Advise on complex and novel issues arising from new technologies, AI, cybersecurity, and evolving regulatory expectations

Develop and improve legal frameworks, playbooks, guidelines, and decision-making processes for recurring privacy and data protection issues

Support the resolution of complex privacy-related matters, including sensitive data subject requests, that require legal judgment

Identify opportunities to improve legal support through automation and create scalable, self-service guidance that helps teams make informed decisions more independently

Monitor developments in privacy, AI, cybersecurity, and enforcement trends, and turn them into practical recommendations

Work closely with other lawyers at Nord Security, Product, Security, and other stakeholders to deliver joined-up, business-focused advice

Core Requirements

Master’s degree in Law (LL.M. or equivalent)

5+ years of relevant experience in privacy and data protection law, gained in-house or in private practice

Strong knowledge of data protection law, with the ability to apply it pragmatically across different jurisdictions, technologies, and business models

Experience acting as a Data Protection Officer or holding privacy certifications would be an advantage

A business-oriented mindset and the ability to give clear, practical advice

Strong systems thinking and the ability to turn recurring issues into scalable processes and guidance

Interest in technology, digital products and business models, AI, cybersecurity, and evolving regulatory frameworks

Strong judgment and confidence handling complex or novel issues

Excellent communication and stakeholder management skills

Ability to manage multiple priorities in a fast-moving, international environment

Fluent written and spoken English

What We Offer

Sharpen your edge: training, mentorship, and room to grow — always.

Take the time you need: extra vacation days, sick days, and time off when life calls.

Get premium healthcare: private health insurance in Lithuania and Poland — fully covered.

Protect your peace: enjoy free subscriptions to Calm, Headspace, and Mindletic, and our own resilience and mindfulness trainings.

Own your fitness: in-house gyms, sport cards, online workouts, and personal guidance — on us.

Pack your bags for workation: experience our company-wide trip abroad to the fullest.

Work from anywhere: work from wherever keeps you in the zone.

Celebrate your milestones: birthdays, weddings, and new family members — all deserve a gift.

Parent with ease: children’s summer camps and flexibility around the schedule — because parenting never pauses.

Join the party: team building and company events people talk about for months.

Unlock Cyber City: coffee bar, open gyms, kids’ room, music room, massage chairs — our Vilnius HQ is yours to enjoy.

Kindly refer to our Privacy Notice for Recruitment Candidates for comprehensive information regarding our data handling procedures throughout recruitment processes.

We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance.

By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter.

If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at [email protected] . Should you prefer to opt out of the automated evaluation, please submit your application directly to [email protected] .