Data Wow is seeking a versatile and commercially minded Legal Counsel to serve as a key legal partner to our business. This role will primarily focus on commercial contract drafting, review and negotiation, while also providing legal support across corporate matters, data protection and regulatory compliance.

The ideal candidate is a strong contract lawyer who can translate legal risks into practical business solutions, work closely with internal stakeholders and proactively protect the company's interests while enabling business growth.

ResponsibilitiesCommercial Contracts & Legal Advisory

• Draft, review, revise and negotiate commercial agreements, including MSA, SOW, NDA, Service Agreements, Vendor Agreements, DPA and other business-related contracts

• Identify and assess legal, commercial and operational risks in contracts and propose practical solutions to mitigate such risks

• Develop appropriate fallback positions and alternative contractual clauses based on the company's risk appetite and business objectives

• Work directly with Sales, Business, Product, Finance, HR and other stakeholders to provide practical legal advice and support business initiatives

• Support contract negotiations with clients, vendors, partners and other business counterparties

• Ensure contractual terms are commercially reasonable and adequately protect the company's interests

• Maintain and improve contract templates, standard clauses and internal contract review guidelines

Corporate & Regulatory Legal

• Provide legal advice on general corporate and commercial matters

• Ensure business activities comply with applicable laws, regulations and internal policies

• Prepare and review corporate documents, licenses, permits and other regulatory filings as required

• Identify potential legal and regulatory risks and proactively recommend mitigation measures

Data Privacy & Compliance

• Provide legal support on Thailand's Personal Data Protection Act (PDPA) and related data privacy matters

• Review and advise on privacy-related contractual provisions, including Data Processing Agreements (DPA) and data protection clauses

• Support privacy requirements for new products, services and business initiatives

• Conduct or support Privacy Impact Assessments and identify potential compliance gaps

• Collaborate with relevant stakeholders to ensure appropriate data protection and privacy practices are implemented

Information Security & Compliance

• Provide legal support for compliance with ISO 27001, ISO 27701 and other applicable regulatory requirements

• Review contractual and operational requirements relating to information security, confidentiality and data protection

• Support internal compliance activities and risk assessments

Requirements

Bachelor's or Master's degree in Law

• 3–5 years of experience in commercial/corporate law, preferably with strong in-house legal or law firm experience

• Proven experience in drafting, reviewing and negotiating commercial contracts

• Strong understanding of key commercial contract terms, including liability, indemnification, limitation of liability, intellectual property, confidentiality, termination, warranties and dispute resolution

• Good knowledge of Thailand's PDPA and data protection regulations

• Strong analytical and problem-solving skills with excellent attention to detail

• Commercially minded with a pragmatic, solution-oriented approach to legal risks

• Able to balance legal protection with business objectives and provide practical recommendations

• Strong negotiation and stakeholder management skills

• Able to prioritize multiple matters and work effectively in a fast-paced environment

• Strong written and spoken communication skills in both Thai and English

• Eager to learn, open-minded and comfortable working in a dynamic technology environment

Preferred

Qualifications

Experience working with technology, SaaS, data, AI or other technology-related businesses

• Experience reviewing agreements involving data processing, intellectual property or technology services

• Experience working with international clients or cross-border contracts

• Experience supporting ISO 27001 / ISO 27701 or other information security and privacy compliance frameworks