> Markdown version of [/jobs/ext/2276153-head-of-legal-compliance](https://www.wearedevelopers.com/jobs/ext/2276153-head-of-legal-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Legal & Compliance - **Company:** Búsqueda Avanzada - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software as a Service, Data Streaming, Data Processing - **Published:** August 28, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role + 8+ years of combined law firm and in-house legal experience, with qualification to practice law in the United States. + Deep, practical privacy experience, particularly with GDPR and CCPA/CPRA, including applying these frameworks to real products, data flows, and business operations. + Strong experience advising Product and Engineering teams and participating directly in technical and product decision-making. + Proven ability to establish or significantly develop a legal and compliance function in an early-stage or high-growth environment. + Strong understanding of data privacy, data sourcing, AI governance, and regulatory risk management. + Experience with TCPA, telephony, dialer, calling, consent, or related communications regulations is highly desirable. + Strong commercial legal experience, including customer and vendor contracts, DPAs, enterprise negotiations, and privacy or security reviews. + Ability to communicate complex legal and regulatory requirements clearly to technical, commercial, and non-legal stakeholders. + Strong judgment and the ability to balance regulatory obligations with commercial priorities, product velocity, and business objectives. + Comfortable operating independently and switching between strategic leadership and detailed hands-on execution. + Experience working in sales technology, B2B data, privacy technology, SaaS, or another technology-driven environment is advantageous. + Certifications such as CIPP/E, CIPP/US, CIPM, or AIGP are welcome but not required. + Academic or professional exposure to Business Analytics is a plus. + Fluent English communication skills, both written and spoken. ## Description This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Head of Legal & Compliance based in Spain. This is a senior, hands-on legal and compliance leadership role within a fast-growing AI-powered B2B technology environment. You will own the legal framework surrounding data, AI-powered calling, privacy, telemarketing compliance, and enterprise customer requirements. The role is designed to be built from the ground up, giving you significant ownership over processes, policies, and risk frameworks. You will work directly with Product and Engineering, helping shape features and technical decisions rather than reviewing them only after development. You will also lead commercial negotiations and enterprise legal and security reviews, helping remove friction from strategic deals. The position requires strong judgment, commercial awareness, and the ability to translate complex regulations into practical product requirements. It is an opportunity to establish a scalable legal and compliance function while becoming a trusted advisor across the business. Accountabilities + Own the legal and compliance framework for AI-powered calling and dialer functionality, including TCPA requirements, consent, do-not-call obligations, call recording, and disclosures relating to AI-generated voice. + Partner closely with Product and Engineering to ensure compliance requirements are implemented directly within platform workflows, controls, and technical processes. + Manage external specialist legal advisors, including a TCPA-focused firm, and determine which matters should be escalated externally versus handled internally. + Lead the privacy program across applicable regulations, including GDPR, CCPA/CPRA, and emerging US state privacy requirements. + Manage data-subject requests, opt-outs, data broker registration requirements, and other operational privacy processes. + Own data sourcing and governance practices, including supplier diligence, lawful-basis assessments, legitimate interest assessments, DPIAs, and transfer impact assessments. + Serve as the designated DPO and establish an effective approach to AI governance as new AI and agentic capabilities are introduced. + Draft, review, and negotiate customer and vendor agreements, data processing agreements, and other commercial legal documentation. + Lead enterprise security and privacy reviews, working to remove legal and compliance barriers that could delay or prevent strategic customer opportunities. + Serve as a key legal contact for enterprise customers and their counsel, building confidence and helping facilitate successful commercial relationships. + Participate directly in product and roadmap planning, identifying regulatory considerations early enough to influence product design and development. + Translate regulatory requirements into clear, practical product and engineering requirements that teams can implement effectively. + Assess emerging regulatory developments, distinguish material risks from overly cautious interpretations, and help the business move quickly while maintaining appropriate compliance standards. + Build and scale legal and compliance processes from the ground up, establishing only the frameworks, controls, and documentation that create meaningful business value. ## Related Videos - [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes) - [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails) - [Rethinking Recruiting: What you didn’t know about Responsible AI](https://www.wearedevelopers.com/videos/1090-rethinking-recruiting-what-you-didn-t-know-about-responsible-ai) - [Implementing continuous delivery in a data processing pipeline](https://www.wearedevelopers.com/videos/73-implementing-continuous-delivery-in-a-data-processing-pipeline) - [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions) - [The Rise of Reactive Microservices](https://www.wearedevelopers.com/videos/494-the-rise-of-reactive-microservices) ## Related Articles - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Should AI be Regulated? The Arguments For and Against](https://www.wearedevelopers.com/magazine/271-should-ai-be-regulated-the-arguments-for-and-against) - [13 AI Tools You Have to Try](https://www.wearedevelopers.com/magazine/219-13-ai-tools-you-have-to-try) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)