DPO/Legal Counsel IT & Telecom (H/F)

In the heart of Europe’s legal and administrative capital, a unique career intersection is opening up. Davidson Consulting is recruiting a DPO/Legal Counsel IT & Telecom (H/F) for its Luxembourg office. This is not your typical in-house counsel role. It asks the successful candidate to fuse two high-stakes disciplines: data protection compliance (GDPR) and legal advisory for IT and telecommunications projects. For legal professionals with a passion for technology, this opportunity offers a rare combination of law, innovation, and European institutional relevance.

The Dual Mandate: Blending DPO Duties with IT & Telecom Legal Counsel

The role is situated within the Legal, Regulatory and Corporate Affairs department, operating at the crossroads of law, innovation, technology, and telecommunications. As the declared DPO to the CNPD (Commission Nationale pour la Protection des Données), you will be the point of reference for personal data protection and information security. But the position goes beyond the traditional DPO brief. You will also act as a business legal partner on strategic IT and telecom projects, negotiating contracts, reviewing digital agreements, and ensuring regulatory compliance across a spectrum of legal issues.

Key responsibilities include:

• Define and implement the company’s personal data protection strategy, ensuring compliance of all processing activities.
• Guide teams and projects on GDPR integration (privacy by design and by default).
• Maintain GDPR governance: processing registers, policy supervision, DPIA reviews, handling data subject requests, and supporting incident management.
• Collaborate with IT and security teams on information security legal matters.
• Provide legal support to major internal projects, offering pragmatic solutions.
• Negotiate, review, and draft IT, digital, and telecom contracts, focusing on data, security, and regulatory compliance.

As a DPO, you will be the point of reference on personal data protection (GDPR) and information security, while acting as a business legal partner on strategic IT and telecom projects.

Why This Luxembourg-Based Role Is a Career Catalyst

Luxembourg occupies a privileged position in the European legal ecosystem. It hosts the Court of Justice of the European Union, the European Court of Auditors, and a dense network of financial and technology companies. For a data protection lawyer, this means exposure to cutting-edge regulatory issues, cross-border cases, and a sophisticated enforcement environment. The Luxembourg supervisory authority, CNPD, is increasingly active, making a DPO role here far from a rubber-stamp job. You would be navigating a landscape riddled with digital services, cross-border data flows, and telecom infrastructure debates.

Moreover, Davidson Consulting is not just any consultancy. It is a group of 3,000 consultants across six countries and two continents, certified Great Place To Work in France and Europe for four consecutive years. It is also a B Corp—a designation given to companies that meet high social and environmental standards. In 2022, it was named "Best of the World" in the "employees" category. For a lawyer, joining such a firm signals a commitment to ethical business practices, work-life balance, and inclusion. The company also gives employees three days per year for volunteering and supports numerous solidarity projects.

Working in this environment, you gain more than technical legal skills. You acquire a reputation as a professional who values ethical leadership, teamwork, and corporate responsibility—attributes that are increasingly important in today’s legal market.

Decoding the Eligibility Matrix: What Davidson Consulting Really Wants

The job posting outlines a clear set of requirements, but reading between the lines reveals what the hiring team truly values: someone who can bridge the gap between legal precision and technological pragmatism.

• Educational background: A master’s degree in law, an LL.M., or equivalent. A Certificate of Computer Data Law (CCDL) is a significant plus.
• Professional experience: 3 to 5 years in data protection (GDPR), ideally as a DPO or GDPR referent. If you are aiming to grow into a senior DPO role, this is your entry point.
• Skill set: Analytical mind, pragmatism, strong written and verbal communication in both French and English, and the ability to dialogue with non-legal stakeholders.
• Work style: Autonomy, team orientation, and a genuine interest in technology and digital innovation.

The language requirement is non-negotiable. This is a French-speaking role in an international setting, so you must be fluent in both French and English. The company also emphasizes its commitment to diversity and encourages applications from persons with disabilities.

Strategic Preparation for a GDPR-Focused Interview

If this role speaks to your ambitions, your preparation needs to reflect the dual nature of the mandate. Here are some strategic steps to consider:

• Refresh your GDPR knowledge, specifically the latest CJEU rulings and CNPD guidance. Be ready to discuss DPIA methodologies and the interplay between GDPR and the NIS Directive (or the new NIS2 Directive).
• Brush up on IT and telecom law: consider that you will be drafting contracts for cloud services, IT outsourcing, and possibly 5G-related matters. Technical vocabulary in both French and English is a must.
• Prepare examples that demonstrate how you have translated data protection principles into business processes. Show how you collaborated with data engineers, cybersecurity teams, or product managers.
• Expect scenario-based questions about data breaches, cross-border transfers under the EU-US Data Privacy Framework, and privacy by design in AI projects.

The successful candidate will be "better than us," as Davidson’s mission states. That is the bar you are aiming for.

Your Application Arsenal: CV, Cover Letter, and Networking

No application deadline was provided in the original posting, which suggests rolling application review. It is wise to submit your materials promptly and tailor them to the dual role. Your CV should lead with your GDPR track record, highlighting any compliance projects, incident responses, or contract negotiations. Use metrics where possible: "Managed over X DPIAs annually" or "Reduced contract review cycle by Y%".

In your cover letter, explicitly mention your interest in IT and telecom law, not just data protection. Reference the company’s B Corp status or its "Great Place To Work" awards to show cultural alignment. If you know anyone at Davidson, ask for a referral—the LinkedIn post shows 57 candidates, so referrals can boost your visibility.

Finally, remember that the original posting is on LinkedIn, but you may also check Davidson Consulting’s own careers page for a direct application portal. Always use the official channel to ensure a complete application.

Frequently Asked Questions

1. Do I need to be a certified DPO to apply?

No, the role explicitly notes that a CCDL certification is an asset, not a mandatory requirement. However, you should have solid GDPR experience and a clear plan to become a certified DPO if you are not already.

2. Is this role open to candidates with less than 3 years of experience?

The job posting asks for 3–5 years of relevant experience. If you are slightly below that threshold but have exceptional skills in IT contracts and GDPR, it may still be worth applying. The company emphasizes motivation and ambition to grow into a confirmed DPO role.

3. What is the salary range?

The original posting does not disclose a specific salary range. Salaries for legal counsel in Luxembourg are competitive, and you should expect a package commensurate with your experience. Negotiate during the interview process.

4. Can I apply if I am fluent in English but not in French?

No—the job explicitly requires excellent writing and communication skills in both French and English. French is the working language for many internal teams, and the legal documents will be in French. Without French fluency, you will not be able to perform the role effectively.