We’re looking for a sharp Legal & Compliance Lead to take full ownership of building and scaling how we manage risk, regulation, and trust across Upsales. This role is about creating the frameworks, policies, and processes that keep us secure, compliant, and ahead of the curve — while enabling our business to move fast.

This is a role for someone who thrives on ownership, precision, and impact. You’ll be both strategist and operator: leading legal structure at scale, while staying close enough to the details to make things happen.

What You’ll Do

You’ll take ownership of Upsales’ legal and regulatory framework — leading everything from customer agreements and terms to supporting the sales team in complex negotiations. You’ll drive our compliance efforts across GDPR, DORA, NIS2, the AI Act, and ISO 27001, ensuring we meet and exceed regulatory standards.

You’ll manage supplier and partnership agreements, oversee the DPO function, and handle incident reporting when needed. You’ll also shape our IP strategy, maintain internal policies, and lead compliance training across the organization. In addition, you’ll handle disputes, insurance, and other legal matters that keep our operations secure and efficient.

Above all, you’ll act as a strategic partner to the business — balancing legal certainty with commercial impact, and building the foundations that enable Upsales to scale safely and confidently.

Who We’re Looking For

You’re an independent legal operator who loves to simplify complexity and build scalable systems. You’re equally comfortable in board-level discussions as you are deep in the details of a contract clause. You understand how to balance legal precision with business pragmatism — and you know when to say “no” and when to find a smarter “yes.”

We think you’ll thrive if you have:

• Law degree from a Swedish university (juristexamen)
• 5+ years of legal or compliance experience
• Worked in-house (not just at a law firm) — ideally in a smaller or fast-scaling organization
• Strong hands-on experience with GDPR and commercial contracts
• Background in IT law, SaaS, or technology environments
• Familiarity with ISO 27001 or similar frameworks is a plus