Pullup Entertainment - Permanent Contract - Senior Lawyer - DPO & AI Compliance (M/F/D)

At PulluP Entertainment, our goal is to offer players around the world unique experiences.

Our editorial line stands out with innovative concepts, alternative gameplay, and original universes that transcend the boundaries of video games.

With over 20 years of experience and success, we dedicate our passion and creativity to the world of gaming and unforgettable stories. For everyone's enjoyment.

As part of the development of our activities, we are looking for a Senior Lawyer - DPO & AI Compliance.

Your missions:

Reporting to the Group Legal Director, you will play a key role in the deployment and management of PulluP Group's compliance system. Independently, you will provide operational support to all our businesses and subsidiaries on crucial issues related to personal data protection and the regulation of Artificial Intelligence.

Within the Legal Department, you may also be called upon to assist with other transversal topics related to the overall compliance of the Group.

In this capacity, you will specifically be involved in the following missions:

1) Governance & Compliance Monitoring

• Contribute to the definition of the compliance roadmap (Data & AI) and ensure its deployment across the Group.

• Draft, deploy, and maintain all legal policies and documents related to Data and AI (Privacy Policies, cookie policies, internal AI charters, Terms of Use, crisis management procedures), taking into account the specificities of the video game sector (minors' data, AdTech, anti-cheat tools).

• Develop regular and precise reporting on the compliance status of your scope for PulluP Group management.

• Act as the point of contact for other relevant supervisory authorities (CNIL, DGCCRF, ARCOM, ANSSI, etc.).

• Maintain proactive regulatory and case law watch (Data & AI) to anticipate impacts on the group's activities.

2) GDPR & Operational Compliance

• Manage day-to-day data processing compliance: maintain and update the register, conduct impact assessments (PIA), internal audits, identify risks, and monitor remediation plans.

• Work in close collaboration with technical teams and information system security (CIO/CISO) on data security to ensure incident management (including preparing notifications to authorities) within deadlines.

• Handle data subject rights requests within the stipulated timeframes.

• Provide operational support to teams in implementing projects involving personal data processing by assessing associated impacts and risks (privacy by design).

3) AI Deployment & Security (AI Act)

• Provide operational support to teams in deploying their Artificial Intelligence projects by assessing associated risks (compliance by design).

• Implement and document AI compliance processes (controls, traceability) to ensure compliance with the AI Act and applicable regulations.

4) Advice, Negotiation & Awareness Raising

• Support Marketing teams on AdTech topics (cookies, pixels, SDKs, ad targeting, etc.).

• Advise operational teams and negotiate contractual clauses related to Data and AI with our suppliers and partners.

• Design and lead awareness and training initiatives for the group's various departments.

What we expect from you:

• You hold a Master's degree in Digital Law, New Technologies Law, Data Protection, and/or a DPO specialization, with a minimum of 7 years of confirmed experience in data protection (experience as a DPO or Deputy DPO is highly appreciated).

• Holding a recognized certification (e.g., IAPP: CIPP/E, CIPM) is a significant asset.

• You have excellent operational command of GDPR and data protection regulations, along with practical knowledge of international regulations (CCPA/CPRA, UK GDPR, PIPEDA, etc.).

• You are proficient in issues related to the processing of minors' data and age verification mechanisms.

• You possess solid knowledge of the regulations governing AI (AI Act / RIA) and the governance challenges of AI systems.

• You are proficient in French and English in a professional context, both written and spoken (autonomous drafting and negotiation of contracts).

• You have excellent writing skills.

What they say about you:

• You demonstrate a strong, pragmatic, and business-oriented risk-based approach (ability to prioritize issues and provide proportionate operational solutions).

• You are recognized for your rigor and your analytical and synthesis skills, demonstrating strong autonomy in case management.

• You are pedagogical and can explain and simplify complex legal concepts clearly to varied audiences (technical, business, management).

• Your interpersonal and communication skills will be key assets for success in this role.

What we offer:

• A structured and respectful work environment where autonomy is valued;

• A culture of excellence supported by an internal program of regular training (technical, managerial, certifications), tailored to the needs of each employee;

• Recognition and appreciation of work through our annual and professional reviews, opening real prospects for development and internal mobility within the Group;

• A flexible framework with two days of remote work per week to encourage work-life balance;

• Modern work tools facilitating collaboration and daily efficiency;

• Regular moments of sharing and conviviality (breakfasts, evenings, seminars) strengthening team cohesion;

• A dynamic atmosphere with various activities (language club, game nights, sports, creative workshops).

Additional information

• Location: Paris 19th

• Metro line 7 – Corentin Cariou / RER E – Rosa Parks

• Remote work: 2 days per week

• Profit-sharing agreement

• Position available immediately

In accordance with the provisions of the Labor Code regarding non-discrimination, particularly concerning disability, all applications are reviewed based on equal skills.

The company is committed to ensuring equal treatment throughout the recruitment process.