How do I apply for this legal position?

To apply for this legal position, click the 'Apply Now' button on this page. You'll need to create an account or log in to submit your application with your resume and cover letter.

What qualifications are required for this legal job?

The specific qualifications are listed in the Requirements section above. Generally, legal positions require relevant legal education, bar admission where applicable, and experience level as specified in the job description.

Is this a remote legal position?

The work arrangement (remote, hybrid, or on-site) is specified in the job details. Check the location and work type information provided in the job posting.

What is the application deadline?

Applications are typically accepted until the position is filled. The job posting will indicate if there's a specific deadline, and you can see when the position was posted above.

← Back to Jobs

Data Protection & Privacy Counsel

CMS Sofia · Sofia, Bulgaria · Hybrid · лв4,500 - лв6,500/year

0 Applicants · 0 Views · Posted 16 hours ago

Position Overview

Location: Sofia, Bulgaria

Compensation: лв4,500 - лв6,500/year

Position: Mid

Type: Job

Remote: Hybrid

Posted: Mar 20, 2026

Deadline: May 19, 2026

Job Description

CMS Sofia is hiring a Data Protection & Privacy Counsel to advise on GDPR compliance, data transfers, and privacy-related regulatory matters for Bulgarian and international clients. With increasing enforcement activity by the Bulgarian Commission for Personal Data Protection (CPDP), demand for specialized privacy counsel continues to grow. CMS provides a collaborative platform with access to one of the largest data protection teams globally.

Responsibilities

Advising clients on GDPR compliance programs and data governance frameworks; Conducting data protection impact assessments and privacy audits; Advising on cross-border data transfers including SCCs and adequacy decisions; Drafting and reviewing data processing agreements and privacy policies; Advising on data breach notification obligations and incident response; Representing clients in CPDP investigations and enforcement proceedings; Monitoring EU and Bulgarian data protection legislative developments including the AI Act.

Requirements

Master's degree in Law; 3-5 years of experience in data protection, privacy, or technology law; Deep knowledge of the GDPR, Bulgarian Personal Data Protection Act, and ePrivacy framework; Experience with data protection impact assessments (DPIAs), records of processing, and data breach management; Familiarity with CPDP enforcement practices and guidance; Certified Information Privacy Professional (CIPP/E) certification is a plus; Fluent English; Detail-oriented and pragmatic approach.

Perks & Benefits

Legal career opportunities, Professional development, Competitive compensation, Health benefits, Retirement planning

Compensation

лв4,500 - лв6,500/year

Practice Area

General Legal

Position

Mid

Applicant Location Requirements

Applicants must be located in: US

Application Contact

Contact: CMS Sofia Hiring Team

Application Deadline

May 19, 2026

Employment Type

Full time