Group General Counsel - International Company (m/f)

ADEM DECLARATION OF VACANT POSITION AND JOB DESCRIPTION

Group General Counsel YIO S.à r.l., Luxembourg

JOB DESCRIPTION

Group General Counsel

Employer: YIO S.à r.l., Luxembourg.

Reporting line: Chief Executive Officer, with dotted reporting line to the Board. Contract: permanent, full-time (40 hours per week). Location: Luxembourg, hybrid, with regular international travel.

1 The business and the role

The company operates an international online subscription and creator platform, with exposure to adult content, and which operates across the United Kingdom, the European Union and the US. The Group General Counsel is the most senior legal officer of the group.

2 Main responsibilities

1. Legal function leadership and Board support

• Build, staff and lead the group legal function, including recruitment, budget, external counsel panel and legal operations.
• Act as principal legal adviser to the Board, the founders and the executive team, and attend Board and committee meetings.
• Set and own the group's legal risk appetite, escalation framework and legal reporting to the Board and to investors.
• Manage disputes and litigation across jurisdictions, including instruction and supervision of external counsel.

1. Corporate, M&A and governance

• Lead corporate and M&A transactions end to end, including target assessment, due diligence, transaction documentation, signing, closing and PMI.
• Support fundraising rounds, investor documentation, shareholder arrangements and cap table matters.
• Own corporate governance across a multi-jurisdictional holding structure, including entity management, board and shareholder resolutions, statutory filings, registers of beneficial owners, delegated authority frameworks and group policies.
• Act as secretary to the Board and to group entity boards, or supervise that function.
• Coordinate with finance and tax on group structuring, intragroup agreements, transfer pricing documentation and substance requirements.

1. Data protection, artificial intelligence and digital regulation

• Own the group's data protection compliance programme under the EU GDPR and the UK GDPR, including records of processing, transfer mechanisms, data protection impact assessments, data subject rights, breach response and supervisory authority engagement.
• Advise on US privacy legislation applicable to the group's user base, including state level comprehensive privacy laws and applicable wiretapping and tracking technology claims.
• Own the group's artificial intelligence governance framework, including the classification of AI systems, transparency obligations for synthetic and AI generated content, model and vendor due diligence, training data and intellectual property questions, and readiness for the EU AI Act.
• Advise on the EU Digital Services Act and the UK Online Safety Act, including notice and action mechanisms, trusted flaggers, transparency reporting, risk assessment obligations, illegal content duties and children's access assessments.
• Advise on the EU Digital Markets Act, the audiovisual media services framework and platform to business regulation as applicable to the group's distribution channels.

1. High risk industry, trust and safety, and content compliance

• Advise on the legal and regulatory framework applicable to adult oriented and creator monetization platforms, including age assurance and identity verification, performer consent and record keeping obligations, nonconsensual intimate image takedown, CSAM prevention and reporting, and content moderation and appeals.
• Design and maintain creator terms, model releases, content licences, revenue share arrangements and agency and management arrangements.
• Advise on advertising, affiliate and performance marketing arrangements, influencer marketing rules and consumer protection requirements in the EU, the UK and the US.
• Manage intellectual property, including trademarks, copyright enforcement and anti-piracy programmes.

1. Payments, financial crime and sanctions

• Own the legal side of the group's payments stack, including acquirer and payment service provider agreements, alternative payment methods, payout and creator disbursement arrangements and merchant of record structures.
• Advise on card scheme rules as they apply to high risk and adult merchant categories, including high brand risk and integrity risk registration programmes, prohibited content rules, chargeback thresholds and remediation plans.
• Advise on PSD2 and strong customer authentication, electronic money and payment institution perimeter questions, and the implications of the EU instant payments and payment services reform.
• Own the group's KYC, AML, CTF and sanctions framework, including creator onboarding, transaction monitoring, and screening against EU, UK, US OFAC and other relevant measures.

1. Commercial and employment

• Negotiate the group's material commercial agreements, including technology, content, distribution, partnership and vendor agreements.
• Support the people function on employment law across multiple jurisdictions, including contracts, contractor classification, incentive schemes and internal investigations.

3 Required profile

The following are requirements (must-haves):

• Law degree from an EU or EEA or UK university.
• Admission in good standing to the bar of an EU or EEA Member State or UK.
• A minimum of 20 years of PQE legal experience, of which at least 10 years in a senior in house legal leadership role (General Counsel, Head of Legal or equivalent).
• Demonstrable experience of building and leading an international in house legal team across diverse jurisdictions.
• A track record of leading cross border M&A transactions in the US, UK and/or EU jurisdictions.
• Corporate governance experience in complex international structures.
• Recognised privacy certification (IAPP CIPP/E or equivalent) and hands on ownership of a GDPR compliance programme.
• Direct working knowledge of the EU/UK digital regulatory framework, including DSA, DMA, OSA, the AI Act, AVMS.
• Substantive experience in high risk regulated industries, and specifically in adult entertainment or creator platform compliance.
• Substantive experience of payment processing and billing for high-risk merchant categories.
• Experience in entertainment and media.
• Tax, KYC/AML and sanctions experience in a regulated or high risk environment.
• Experience advising founders, C level executives and Boards in a venture backed, high growth environment.
• English at level C (native/bilingual/proficient user).

The following are advantages (nice to haves):

• Postgraduate business qualification (MBA or equivalent).
• Formal training or certification in AI
• Recognised corporate governance certification (e.g. ILA CGO).
• Qualification or formal training in international taxation and in corporate compliance.
• Experience of a Luxembourg holding structure and of Luxembourg corporate and employment law.
• Additional languages, in particular Spanish, French, Portuguese, German or Luxembourgish.
• Prior experience in a matrix organisation or in the country or regional unit of a multinational group.

4 Personal attributes

• Commercial and pragmatic. Comfortable taking a risk-based position and defending it to the Board.
• Comfortable operating hands on in a lean team while also delegating and developing others.
• Able to work across cultures and time zones, and to hold credibility with founders, investors, regulators and counterparties.
• Willing to work in a business whose content categories include adult material.

5 Terms

• Contract: permanent (contrat à durée indéterminée), governed by Luxembourg law.
• Working time: full time, 40 hours per week, flexible arrangement.
• Place of work: [LuxCo address], Luxembourg, with hybrid working and regular travel, principally to London.
• Remuneration: gross annual salary between EUR 150,000 and EUR 250,000.
• Start date: as soon as possible.
• Pre appointment requirements: bulletin N°3 of the criminal record, to be requested by the candidate, and a certificate of fitness for the post issued by the competent occupational health service.