Data Protection, Cybersecurity, Telecommunications and Artificial Intelligence – Associate
Our Data Protection, Cybersecurity, Telecommunications and AI Practice
Our practice is consistently entrusted by leading domestic and multinational corporations, institutions, telecommunications operators, and technology companies with their most complex mandates in data privacy, cybersecurity, telecommunications regulation and artificial intelligence. We advise sophisticated clients across industries on the full lifecycle of digital regulatory risk, from strategic compliance and governance to crisis response and enforcement, including multiple regulators.
Our specialized privacy team is committed to offering practical, business-oriented advice and to helping clients ensure compliance and manage risk, from major cyber incidents to regulatory investigations and transformational transactions. Our aim is to assist our clients achieve their commercial and transactional objectives within an increasingly demanding legislative framework.
The Opportunity
Data privacy, cybersecurity, telecommunications and artificial intelligence are the fastest-moving and most commercially consequential areas of legal practice today. This is an exceptional opportunity to join a specialist team and take on responsibility in high-profile mandates, — from GDPR and ePrivacy compliance, data breach and cyber incident response to technology transactions, telecommunications regulatory matters and the governance of AI systems under the EU AI Act and emerging regimes that are reshaping the business landscape.
If you aspire to practice at the forefront of law, technology, and regulation and you are committed to developing expertise across cybersecurity, telecommunications regulation and artificial intelligence, we would like to hear from you.
At Bernitsas, diversity, equality, and inclusion are not policies — it is how we work. Our commitment is independently reflected in our recognition as one of the Best Workplaces™ for Women and Best WorkplacesTM for Young Professionals in Greece. We welcome applications from all qualified candidates.
Send us your CV to applications@bernitsaslaw.com, quoting reference “DPP_1126”.
We read every application ourselves — no automated screening, no algorithms. All applications are treated as strictly confidential.
Advising sophisticated clients across industries on GDPR, e-Privacy and national data protection compliance, data protection obligations, and privacy risk management.
Conducting privacy compliance reviews and audits — including data protection impact assessments, transfer impact assessments and records of processing activities.
Advising and representing clients in regulatory investigations, audits and enforcement proceedings.
Drafting and negotiating data processing agreements, privacy notices, data transfer mechanisms, intra-group arrangements and other privacy documentation.
Supporting clients on privacy aspects of corporate and commercial transactions — including due diligence and contractual negotiations.
Counselling clients on cyber incident preparedness and response, including regulatory and contractual notifications and engagement with authorities.
Advising on cybersecurity regulatory compliance.
Advising boards and senior management on cyber risk management, governance and oversight, third-party and supply-chain risk and other cyber law considerations.
Advising operators and telecoms providers on regulatory matters under the EU and Greek telecommunications legislations, including licensing and proceedings before the EETT
Counselling clients on AI governance frameworks, risk classification and compliance under the EU AI Act and emerging national AI rules
3 to 5 years of relevant working experience in data protection and privacy law (essential)
Bachelor of Laws degree (LLB) with a strong academic record (essential)
Admitted to the Athens Bar Association or a regional Bar Association in Greece - dual qualification with foreign Bar Associations is welcome (essential)
Fluency in both Greek and English – written and spoken (essential)
Experience in at least one of cybersecurity, telecommunications regulation or artificial intelligence (essential)
Exposure to complex matters, ideally regulatory investigations or incident responses (essential)
LLM degree, ideally in data protection, privacy, technology, or related fields (essential)
Analytical and drafting ability — a consistent track record of precise, high-quality work across complex privacy documentation
Research skills — the ability to monitor and interpret rapidly evolving regulatory developments across EU and national frameworks
Written and spoken communication — fluent and confident in both Greek and English, with clients, regulators, and colleagues
Interpersonal and teamwork skills
Working under time pressure - sound judgment and responsiveness in time-critical situations such as cyber incidents and regulatory deadlines
Client orientation and proactivity — a demonstrated ability to anticipate client needs and take initiative across complex and fast-moving regulatory matters
Commitment to quality — a personal standard that matches the calibre of work this practice is known for
Direct involvement in high-profile data protection, cybersecurity, telecommunications and AI mandates — working at the intersection of law, technology, and business
Constant exposure to regulatory developments shaping the EU and national landscape
Structured career development — continuous professional growth supported by a firm that invests in its people
A collaborative, award-winning culture —recognised as one of the ‘Best Workplaces™ in Professional Services & Consulting’, ‘Best Workplaces™ for Women’ and ‘Best Workplaces™ for Young Professionals’ in Greece (2026)
Hybrid flexibility — work from home one day per week
Competitive compensation tailored to your experience and the market
Premier private healthcare coverage and extensive employee support
Monthly card for public transport (ATH.ENA Card)
