Detail of the vacancy notice

  • Directorate: N/A
  • Management: no
  • Unit/Service: Legal Affairs Unit ​​​​
  • Grade: Contract staff member FGIII
  • Location: Brussels
  • Duration of the contract: 2 years starting from 1/1/2027
  • How to apply: Online application form

Your job and responsibilities

Interested in EU data-protection law and the protection of individuals in an evolving digital environment? Would you like to provide practical support helping the CoR comply with its data-protection obligations and integrate data-protection requirements into AI, cybersecurity and digital initiatives?

As a legal assistant specialising in data protection and AI in the Legal Service, supporting the Data Protection Officer and working under the supervision of officials or temporary staff, you provide legal, drafting, technical and operational support for the application of Regulation (EU) 2018/1725 across CoR directorates and services, including where personal-data processing involves AI systems, information-security measures, cybersecurity incidents or emerging technologies.

You support the organisation, assessment and administrative follow-up of data-protection files. In particular, you prepare first drafts and perform completeness and consistency checks of data-protection notices and records of processing activities, update the relevant registers, gather information from delegated controllers and contribute to data-protection impact assessments. You also assist with the handling and documentation of personal-data breaches, data-subject requests, contracts and procurement files, international data transfers, complaints, investigations and consultations involving the Data Protection Officer.

You carry out legal research and prepare initial analyses concerning the respective roles and responsibilities of controllers, joint controllers and processors, and contribute to drafting or reviewing contractual clauses, arrangements and accountability documents. Under supervision, you also support assessments of AI systems, information-security measures and cybersecurity incidents from a data-protection perspective, including lawfulness, purpose limitation, data minimisation, transparency, data-subject rights, security of processing, accountability, privacy by design and by default, human oversight, risk assessment and safeguards for international transfers. You contribute to awareness-raising activities and to practical cooperation with the EDPS and interinstitutional partners.

You join the CoR Legal Service (Legal Affairs Unit), a small, dynamic and motivated team consisting mainly of lawyers specialising in various fields of EU law. The unit includes the Data Protection Officer and Deputy Data Protection Officer and reports directly to the Secretary-General.

Are you the talent we are looking for?

GENERAL ABILITIES AND CAPACITIES REQUIRED

  • Think critically, analyse and solve problems pragmatically.
  • Assess the credibility and reliability of sources, data and information, and use the relevant digital tools to carry out your duties.
  • Organise your own work, demonstrate responsibility, identify priorities, make appropriate decisions and deliver results. 
  • Adapt to an evolving working environment, demonstrate commitment and adopt a constructive attitude at all times. Remain effective and flexible even during periods of heavy workload.
  • Take initiative to achieve individual and shared objectives, demonstrate ownership and work autonomously.
  • Learn and develop professionally to continuously enhance job performance, your knowledge of the organisation and the working environment.
  • Work together with others in a constructive way, by contributing to diverse and inclusive working environment. Act with respect and courtesy at all times.
  • Convey information and relevant opinions clearly and concisely both orally and in writing, facilitate interaction and engage effectively with others. Treat confidential or sensitive information accordingly.

JOB-SPECIFIC REQUIREMENTS

  • You have passed EPSO CAST FGIII.
  • You have relevant experience in legal, technical or administrative support relating to data-protection compliance, preferably involving Regulation (EU) 2018/1725. This may include preparing or checking data-protection notices and records of processing activities, maintaining registers, collecting information for data-protection impact assessments, supporting the handling of personal-data breaches or data-subject requests, checking contractual data-protection clauses, documenting international data transfers or preparing files for review by a data-protection officer or supervisory authority. Experience supporting assessments concerning AI systems, information-security measures or cybersecurity incidents is an asset.
  • You have good legal research, drafting and file-management skills, attention to detail and the ability to coordinate contributions, follow established procedures, manage several files and translate data-protection requirements into clear draft documents, checklists and practical support materials for validation by the responsible official or temporary staff member.
  • You have a thorough knowledge of one of the official languages of the European Union and a satisfactory knowledge of another of the EU official languages. For functional reasons, a high level of English is required and a good level of French is desirable.
  • You have a good command of IT applications and tools, such as Outlook, Excel, Word and SharePoint, including AI tools in a secure environment.
  • You are interested in EU data-protection law, fundamental rights and emerging technologies, and you work effectively with legal and operational colleagues while following guidance, procedures and deadlines.
  • You have a level of education corresponding to completed post-secondary education attested by a diploma, preferably in law, public administration, information governance or another field relevant to the duties; or a level of secondary education attested by a diploma giving access to post-secondary education, followed by at least three years of appropriate professional experience. Familiarity with the principles of lawfulness, purpose limitation, transparency, data minimisation, security, accountability and data protection by design and by default is required. Knowledge of the EU AI Act, cybersecurity rules or information-security governance from a data-protection perspective is an asset.

Please note that candidates must meet the eligibility criteria specified in art. 82(3) of the Conditions of Employment of Other Servants

At Impactpool we do our best to provide you the most accurate info, but closing dates may be wrong on our site. Please check on the recruiting organization's page for the exact info. Candidates are responsible for complying with deadlines and are encouraged to submit applications well ahead.
Before applying, please make sure that you have read the requirements for the position and that you qualify. Applications from non-qualifying applicants will most likely be discarded by the recruiting manager.