Group Legal Counsel, Data Privacy

About the role

Stillfront, a global gaming company headquartered in Stockholm, is looking for a Group Legal Counsel, Data Privacy. The role owns the group's data privacy work end to end, with real scope to shape how it is run and where it goes next. It is a genuinely global mandate covering every studio and function, and you will report to the Group General Counsel.

You will work closely with the external Data Protection Officer on the formal DPO function, while you handle the substance: strategy, policies, assessments and the day-to-day decisions. You will also advise on commercial and studio agreements and instruct and manage outside counsel on disputes.

Key responsibilities

• Run a consistent, risk-based data privacy programme across independent studios on three continents
• Own GDPR and data protection work end to end: policies, DPIAs, RoPA, data processing agreements, cross-border transfers and incident response
• Work with the external DPO to keep governance solid and statutory obligations covered
• Train and support the privacy leads embedded in the studios
• Advise on and negotiate commercial and studio agreements from first draft to signature
• Instruct and manage outside counsel on disputes and specialist matters
• Turn GDPR, AI regulation and related topics into practical guidance and report progress and risk to senior stakeholders

Required profile

• Minimum 5 years PQE from a Swedish law firm and/or an in-house legal team, with real ownership of data privacy matters
• Track record of developing or scaling a privacy function
• Solid working knowledge of GDPR and data protection principles, plus commercial contract experience
• Experience instructing and managing outside counsel on disputes or complex matters
• Comfortable making decisions with minimal oversight and in a changing environment
• Native-level Swedish and fluent, professional English
• Background in gaming, tech or another digital industry is a plus