Legal Counsel — Cyber Security, Technology Safety & Physical Security (AI/Cloud Cybersecurity)

Location: Tel Aviv, Israel. Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility.

Company

Nebius is building a full-stack AI cloud platform for data and model training through production deployment, with infrastructure spanning compute, storage, networking, and applied AI.

What you will do

• Review, draft, and negotiate cybersecurity, physical security, supply-chain, resilience, data-protection, and liability provisions in customer contracts.
• Advise Product, Engineering, Security, Sales, Customer Success, Procurement, and executives on customer requirements, technical controls, security commitments, and complex transactions.
• Support ISO 27001, SOC 2, PCI DSS, and other certification, audit, assurance, remediation, and evidence-disclosure activities.
• Manage legal advice on DORA, NIS2, CRA, cybersecurity, operational resilience, digital services, and technology requirements, including engagement with authorities.
• Support security governance, risk acceptance, third-party risk, cloud governance, secure development, vulnerability disclosure, AI use, product launches, and material architecture or service changes.
• Maintain cyber-incident response plans, notification matrices, decision logs, tabletop exercises, playbooks, templates, training, service levels, and process improvements.

Requirements

• Law degree and admission to practice, or equivalent professional legal qualification in a relevant jurisdiction.
• Typically 7+ years of relevant legal experience, including significant in-house responsibility for technology, cybersecurity, cloud services, product counseling, commercial contracts, or regulated products.
• Progression into a senior counsel, legal director, or comparable leadership role with ownership of complex, business-critical matters.
• Experience negotiating customer security and data-protection terms and advising Security, Product, Engineering, and executive stakeholders.
• Working knowledge of common security and assurance frameworks, with the ability to understand technical concepts and assess their legal and contractual implications.
• Strong judgment, concise drafting, executive communication, strategic project management, and prioritization of multiple time-sensitive matters in a commercial environment.
• High integrity and discretion when handling privileged, confidential, security-sensitive, or incident-related information.

Nice to have

• Senior in-house experience with a SaaS, cloud, cybersecurity, enterprise technology, or other business-to-business technology company.
• Experience supporting security certifications, external audits, trust centers, public-sector customers, or highly regulated customers.
• Experience with global cybersecurity and resilience regimes and coordinating advice across multiple jurisdictions.
• Experience building scalable legal intake, contract playbooks, knowledge bases, workflow automation, or legal-operations programs.
• Prior work involving cyber affairs, government, defense, international or regional legal matters, or other high-stakes regulated environments.
• Advanced degree or formal specialization in international law, technology law, cybersecurity, privacy, or a related discipline.

Culture & Benefits

• Competitive compensation, career growth, and learning opportunities.
• Flexibility, ownership, and a collaborative, innovative culture.
• Opportunity to work on impactful AI projects with international teams.
• Fast-moving environment focused on bold thinking, growth, meaningful impact, trust, and ownership.