Data Protection, Cybersecurity, Telecommunications and Artificial Intelligence - Associate Lawyer

Our Data Protection, Cybersecurity, Telecommunications and AI Practice

Our practice is consistently entrusted by leading domestic and multinational corporations, institutions, telecommunications operators, and technology companies with their most complex mandates in data privacy, cybersecurity, telecommunications regulation and artificial intelligence. We advise sophisticated clients across industries on the full lifecycle of digital regulatory risk, from strategic compliance and governance to crisis response and enforcement, including multiple regulators.

Our specialized privacy team is committed to offering practical, business-oriented advice and to helping clients ensure compliance and manage risk, from major cyber incidents to regulatory investigations and transformational transactions. Our aim is to assist our clients achieve their commercial and transactional objectives within an increasingly demanding legislative framework.

The Opportunity

Data privacy, cybersecurity, telecommunications and artificial intelligence are the fastest-moving and most commercially consequential areas of legal practice today. This is an exceptional opportunity to join a specialist team and take on responsibility in high-profile mandates, — from GDPR and ePrivacy compliance, data breach and cyber incident response to technology transactions, telecommunications regulatory matters and the governance of AI systems under the EU AI Act and emerging regimes that are reshaping the business landscape.

If you aspire to practice at the forefront of law, technology, and regulation and you are committed to developing expertise across cybersecurity, telecommunications regulation and artificial intelligence, we would like to hear from you.

What You Will Be Doing

Data Privacy and Protection

• Advising sophisticated clients across industries on GDPR, e-Privacy and national data protection compliance, data protection obligations, and privacy risk management

• Conducting privacy compliance reviews and audits — including data protection impact assessments, transfer impact assessments and records of processing activities

• Advising and representing clients in regulatory investigations, audits and enforcement proceedings

• Drafting and negotiating data processing agreements, privacy notices, data transfer mechanisms, intra-group arrangements and other privacy documentation

• Supporting clients on privacy aspects of corporate and commercial transactions — including due diligence and contractual negotiations

Cybersecurity

• Counselling clients on cyber incident preparedness and response, including regulatory and contractual notifications and engagement with authorities

• Advising on cybersecurity regulatory compliance

• Advising boards and senior management on cyber risk management, governance and oversight, third-party and supply-chain risk and other cyber law considerations

Telecommunications

• Advising operators and telecoms providers on regulatory matters under the EU and Greek telecommunications legislations, including licensing and proceedings before the EETT

Artificial intelligence

Counselling clients on AI governance frameworks, risk classification and compliance under the EU AI Act and emerging national AI rules

Required Qualifications

Essential:

• 3 to 5 years of relevant working experience in data protection and privacy law

• Bachelor of Laws degree (LLB) with a strong academic record

• Admitted to the Athens Bar Association or a regional Bar Association in Greece - dual qualification with foreign Bar Associations is welcome

• Fluency in both Greek and English – written and spoken

A strong plus:

• Experience in at least one of: cybersecurity, telecommunications regulation or artificial intelligence

• Exposure to complex matters, ideally regulatory investigations or incident responses

• LLM degree, ideally in data protection, privacy, technology, or related fields

Required Skills

• Analytical and drafting ability — a consistent track record of precise, high-quality work across complex privacy documentation

• Research skills — the ability to monitor and interpret rapidly evolving regulatory developments across EU and national frameworks

• Written and spoken communication — fluent and confident in both Greek and English, with clients, regulators, and colleagues

• Interpersonal and teamwork skills

• Working under time pressure - sound judgment and responsiveness in time-critical situations such as cyber incidents and regulatory deadlines

• Client orientation and proactivity — a demonstrated ability to anticipate client needs and take initiative across complex and fast-moving regulatory matters

• Commitment to quality — a personal standard that matches the calibre of work this practice is known for

What we offer at Bernitsas

• Direct involvement in high-profile data protection, cybersecurity, telecommunications and AI mandates — working at the intersection of law, technology, and business

• Constant exposure to regulatory developments shaping the EU and national landscape

• Structured career development — continuous professional growth supported by a firm that invests in its people

• A collaborative, award-winning culture —recognised as one of the ‘Best Workplaces™ in Professional Services & Consulting’, ‘Best Workplaces™ for Women’ and ‘Best Workplaces™ for Young Professionals’ in Greece (2026)

• Hybrid flexibility — work from home one day per week

• Competitive compensation tailored to your experience and the market

• Premier private healthcare coverage and extensive employee support

• Monthly card for public transport (ATH.ENA Card)

Our Commitment to Diversity and Inclusion

At Bernitsas, diversity, equality, and inclusion are not policies — it is how we work. Our commitment is independently reflected in our recognition as one of the Best Workplaces™ for Women and Best Workplaces™ for Young Professionals in Greece. We welcome applications from all qualified candidates.

How to Apply

Send us your CV to applications@bernitsaslaw.com, quoting reference “DPP_1126”.

We read every application ourselves — no automated screening, no algorithms. All applications are treated as strictly confidential.