Legal Counsel (Corporate & Product Compliance) at Scrambly

Why This Corporate & Product Compliance Role at Scrambly Demands Your Attention

When a bootstrapped adtech scale-up growing 250% year-over-year decides to hire its first Legal Counsel, it is not merely filling an open requisition. It is building a legal function from the ground up. Scrambly, which has been featured in the AppsFlyer Performance Index and the Singular ROI Index within just 3.5 years, is now looking for a Legal Counsel (Corporate & Product Compliance) based in Belgium. For lawyers chasing a high-impact, cross-functional career at the intersection of technology, data protection, and commercial law, this role represents a rare chance to shape a global compliance framework from its earliest days.

This isn't a typical in-house counsel seat. The role explicitly includes Data Protection Officer (DPO) responsibilities, requiring fluency in GDPR, CCPA, and the equivalent regimes in Japan, South Korea, and the UK. It spans drafting Terms of Service, negotiating partner agreements, and advising product teams on subscription models, refund policies, and digital consumer protection. For a lawyer who enjoys both strategic thinking and pragmatic execution, the job description reads like a masterclass in modern tech law.

Inside Scrambly: A Rewards-Powered App Discovery Engine

Before examining the legal nuances, it is essential to understand the business. Scrambly describes itself as a reward-powered alternative to the App Store and Google Play. It builds a loyalty-driven ecosystem that connects millions of users with top mobile apps, delivering ROI-focused growth for advertisers. The company is fully bootstrapped and profitable, which means legal decisions directly impact the bottom line. This is not a corporate behemoth with layers of bureaucracy; it is a lean, fast-moving startup where general counsel work touches every department.

“We’re building the future of app discovery: a reward-powered alternative to the App Store and Google Play.” — Scrambly

For legal professionals, this context matters. Working in a hyper-growth adtech company means legal advice is often sought in real time, and “no” is rarely an acceptable answer. The job description emphasizes a “business-oriented mindset” and the ability to “weigh legal risks and propose pragmatic solutions.” That phrase is code for being a business partner, not a bottleneck.

Breaking Down the Core Responsibilities: Corporate, Product, and DPO

The role is deliberately structured into three pillars. Understanding each is critical for any applicant tailoring their CV or preparing for interviews.

Corporate & Operational Legal

• Drafting, reviewing, and negotiating commercial and partner agreements.
• Ensuring compliance with local regulations in the EU, Japan, South Korea, the UK, and the US.
• Providing day-to-day legal guidance to management and cross-functional teams.

These responsibilities demand more than just contract law familiarity. A successful candidate will need to understand how adtech partnerships function, including attribution, performance-based pricing, and data-sharing arrangements.

Product & Compliance

• Maintaining user-facing legal documents like Terms of Service, Privacy Policy, and Cookie Policy.
• Advising on GDPR, CCPA, and equivalent international consumer protection frameworks.
• Supporting new product initiatives such as subscription models, including refund and cancellation policies.

The product compliance element is where lawyers often struggle. It requires translating legal requirements into actionable product decisions. For instance, a change in refund policies could affect user retention and revenue. The role asks you to provide “risk-based recommendations rather than rigid interpretations,” which is a clear signal that Scrambly values legal creativity.

Data Protection & Privacy (DPO Responsibilities)

• Serving as the company’s Data Protection Officer.
• Maintaining records of processing and embedding privacy-by-design.
• Leading responses to data subject requests, incidents, and regulatory inquiries.
• Developing internal privacy governance frameworks and staff training.

This is a senior, accountable position. In many companies, DPO duties are separate from general counsel work. Scrambly has merged them, which means the role carries significant regulatory exposure. Candidates must be prepared to demonstrate a track record in managing data protection incidents and interacting with supervisory authorities.

Who Is the Ideal Candidate? Decoding the Requirements

Scrambly is looking for someone with a Master’s degree in Law and bar admission in any EU jurisdiction (preferred). The experience bar is set at five or more years as legal counsel or in a similar role, ideally within a tech, SaaS, or digital product company. The job description does not state a deadline, and location is simply “Belgium,” but the role appears flexible enough for remote or hybrid work.

The technical legal requirements are extensive. The ideal candidate must have deep knowledge of data privacy and consumer protection regulations, including GDPR, CCPA, and the equivalents in Japan, South Korea, and the UK. They must also have experience drafting and localizing user-facing legal documents. But the softer skills are just as important: excellent English communication, cross-cultural collaboration, and an entrepreneurial spirit.

Why This Role Is a Game-Changer for Your Legal Career

Taking this position would put you at the centre of one of the most dynamic sectors in the digital economy. Here are some career benefits that go beyond a salary:

• Ownership and visibility: You will build the legal and privacy function from scratch, reporting directly to founders and leadership.
• Global regulatory exposure: You will work across multiple jurisdictions, from EU GDPR to Japanese APPI and Korean PIPA, making you a truly international compliance expert.
• Cross-functional influence: You will sit with product, engineering, marketing, and operations teams, giving you a 360-degree view of a scaling business.
• High-growth environment: Scrambly is growing 250% YoY, which means you will likely face novel legal questions that no AI template can answer.

For Indian lawyers looking to move abroad, this role offers a potential pathway to the European legal market. While Belgian bar admission is preferred, the job is open to candidates with EU bar admission. An Indian lawyer with an LLM from a European university and relevant tech law experience could be a strong fit, especially if they have prior DPO training. However, it is essential to be realistic about work authorization requirements in Belgium.

Preparing a Winning Application: Strategies That Stand Out

Given that Scrambly will likely receive hundreds of applications (LinkedIn shows “be among the first 25 applicants”), your cover letter and CV need to be sharp. Here are some preparation strategies:

• Quantify your experience: Instead of saying “handled GDPR compliance,” mention the specific volume of data subject requests, the jurisdictions you covered, and how you improved response times.
• Show product sense: Demonstrate that you can read a product spec and identify legal risks. Provide a short example of a time you advised on a new feature and balanced compliance with business goals.
• Highlight DPO experience: If you have served as a DPO or completed certified DPO training, put it at the top of your CV. The role explicitly requires DPO responsibilities.
• Tailor for adtech: Research Scrambly’s business model and mention how you would handle advertising data, SDK integrations, and cross-border data flows.
• Network strategically: Reach out to current Scrambly employees on LinkedIn. Referrals double the chance of an interview, as the job posting itself notes.

“Balance compliance and business goals by providing risk-based recommendations rather than rigid interpretations of regulations.” — Scrambly job description

In your interview, expect questions that probe your judgment. You might be asked: “Our product team wants to launch a subscription feature in Japan. What are the top three legal considerations?” A strong candidate would discuss local consumer protection law, payment processing regulations, and data privacy implications under the Act on Protection of Personal Information (APPI).

The Bigger Picture: Compliance as a Competitive Advantage

Adtech has faced intense regulatory scrutiny across the globe, from GDPR fines to the growing enforcement of digital consumer protection laws. Companies like Scrambly understand that a proactive legal function is not a cost centre; it is a competitive differentiator. By investing in a seasoned Legal Counsel with DPO duties, Scrambly is signalling to advertisers, partners, and regulators that it takes compliance seriously. For applicants, that is a powerful promise. You will not be a passive observer; you will be an architect of trust.

The role is based in Belgium, a jurisdiction that is home to the EU institutions and a hub for tech companies. The location offers a strategic vantage point for understanding EU regulatory trends. While the job posting does not mention a specific application deadline, candidates should apply promptly given the “be among the first 25 applicants” prompt. The application process is via LinkedIn, and you will need to create a profile or sign in.

Frequently Asked Questions

Is this role a remote position or based in a specific Belgian city?

The job posting simply says “Belgium” with no specific city or remote-work policy. Scrambly offers a “flexible work environment,” so it is likely hybrid or remote-friendly within Belgium. Candidates should discuss location expectations during the interview.

Does Scrambly sponsor work visas for this Legal Counsel role?

The job description does not mention visa sponsorship. It requires bar admission in an EU jurisdiction, which strongly suggests the candidate must already have the right to work in Belgium or the EU. Non-EU candidates should evaluate their work authorization options separately.

What is the most important quality Scrambly is looking for in this Legal Counsel?

The job description repeatedly emphasises a “business-oriented mindset” and the ability to provide “risk-based recommendations.” This means the ideal candidate is not just a legal expert but a strategic business partner who can facilitate growth while staying compliant.

What would a typical day look like in this role?

A typical day might involve negotiating a partnership agreement in the morning, reviewing a new data-sharing feature with the engineering team in the afternoon, and responding to a data subject request from a user in South Korea before the close of business. The role is highly cross-functional and ever-changing.