C

CoreWeave

Rents GPU cloud computing for AI developers

Senior Counsel - Privacy & AI Compliance

Legal Counsel & Legal SupportUpdated on Nov 13
Full-timeIn-person

About the Job

Requirements

  • The candidate must have 4 or more years of relevant legal experience, including substantial experience advising on European privacy and data protection matters.
  • The candidate must be qualified to practice law in an EU member state or the United Kingdom and be in good standing with the applicable professional body.
  • The candidate must have strong working knowledge of the GDPR and UK GDPR, including controller and processor obligations, privacy-by-design requirements, data subject rights, international transfers, DPIAs, security and breach notification, and regulator engagement.
  • The candidate must have meaningful experience with AI governance or emerging AI regulation, including the ability to interpret and operationalize the EU AI Act for technology, cloud, infrastructure, or enterprise use cases.
  • The candidate must be able to independently manage complex regional matters, identify material risk, present practical options, and make clear, defensible recommendations in ambiguous situations.
  • The candidate must have experience building or operationalizing privacy and AI compliance programs through policies, assessments, controls, training, governance processes, monitoring, and audit-ready documentation.
  • The candidate must have technical fluency and be able to understand data flows, cloud architecture, product functionality, AI systems, and security practices and translate them into actionable legal guidance.
  • The candidate must have drafting and communication skills sufficient to explain complex legal requirements clearly and influence technical, commercial, and business stakeholders across jurisdictions.
  • The candidate must be able to build trusted cross-functional relationships, manage multiple priorities, and work effectively in a fast-paced, rapidly scaling global environment.
  • Successful applicants offered employment must complete a basic criminal record check in compliance with GDPR; employment offers are conditional on satisfactory results.

Responsibilities

  • Advise on EU and UK privacy, data protection, and AI laws and regulatory developments, including the GDPR, UK GDPR, ePrivacy requirements, the EU AI Act, the EU Data Act, and related national implementing laws and guidance.
  • Translate complex legal requirements into clear, practical, and scalable guidance for Product, Engineering, Security, Commercial, Marketing, HR, Procurement, and operational teams across Europe.
  • Lead or support privacy and AI assessments for new and evolving products, features, data uses, vendors, and business initiatives, including DPIAs, legitimate-interest assessments, transfer impact assessments, AI risk and classification analyses, and documented compliance decisions.
  • Partner with Product and Engineering to embed privacy by design and default, responsible AI, data minimization, transparency, security, retention, and governance requirements into product architecture and development processes.
  • Advise on international data transfers, data localization and residency requirements, cross-border access, and related contractual and operational mechanisms, including EU Standard Contractual Clauses and the UK International Data Transfer Addendum or Agreement.
  • Support implementation of CoreWeave’s AI compliance framework in Europe, including role and use-case classification, risk management, transparency, recordkeeping, human oversight, technical documentation, contractual allocation of responsibilities, and governance for internal and customer-facing AI uses.
  • Provide regional guidance on data subject rights, records of processing, privacy notices, consent and cookies, retention and deletion, data sharing, direct marketing, and other core privacy program requirements.
  • Advise on European product launches, market entry, strategic partnerships, customer and vendor arrangements, and commercial terms involving privacy, data use, AI, and regulatory responsibility.
  • Support cybersecurity and privacy incident response in Europe, including assessment of regulator and data subject notification obligations, engagement with relevant stakeholders, and documentation of defensible legal decisions.
  • Lead or support responses to inquiries, audits, consultations, and investigations involving European data protection authorities, AI regulators, and other governmental bodies; coordinate with local counsel and drive follow-up and remediation.
  • Develop and maintain regional policies, procedures, playbooks, training, control mappings, and evidence of compliance, and monitor emerging legal and enforcement trends to inform business strategy and program priorities.

Desired Qualifications

  • A mix of law firm, regulatory, and in-house experience.
  • Experience advising a high-growth cloud, AI, SaaS, data center, infrastructure, or other technology company.
  • Experience engaging with European data protection authorities, AI regulators, standards bodies, industry groups, or external counsel on novel technology issues.
  • Experience advising on cross-border data transfers, cloud service provider obligations, enterprise AI governance, and the allocation of regulatory responsibilities between providers and customers.
  • Familiarity with recognized privacy, security, and AI governance frameworks or standards, such as ISO/IEC 27701 and ISO/IEC 42001.

About the Company

CoreWeave

Rents GPU cloud computing for AI developers

CoreWeave rents cloud computing to AI labs and businesses that train models and run them in production for research and commercial applications. Its platform combines NVIDIA graphics chips, storage, networking, and software built for demanding AI workloads across connected clusters scaled to fit each project. CoreWeave Forge connects tools for tracking experiments, testing models, and improving AI systems using feedback from production. Customers rent computing capacity through committed contracts or usage charges, while managed services handle the infrastructure needed to keep large workloads running. CoreWeave was founded in 2017 and is headquartered in Livingston, New Jersey.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Livingston, NJ
Founded
2017

Recently Posted Jobs

Explore more opportunities at CoreWeave

See more jobs