Counsel II

Overview

Reporting to the Assistant General Counsel, Privacy, Data Governance & AI Governance, this Counsel II role partners with the privacy team and cross-functional stakeholders across Product, Engineering, Marketing, HR, Sales, and Security to execute and continuously mature privacy, data governance, and AI governance programs. The position supports day-to-day legal needs while helping scale these functions through process design, governance frameworks, and practical business enablement.

Responsibilities

• Provide practical, business-oriented contract support to sales, procurement, and business teams, identifying opportunities to standardize positions and accelerate deal velocity through reusable playbooks and guidance.
• Serve as lead counsel for privacy-related commercial transactions, supporting procurement and customer-facing agreements, including negotiation of:
  • Data Processing Agreements
  • Business Associate Agreements
  • Security exhibits
  • Other complex privacy and technology terms.
• Scale the privacy program.
• Partner across Product, Engineering, Marketing, HR, Sales, Security, and Legal to embed privacy and responsible data practices into technology, operations, and innovation.
• Translate emerging privacy, cybersecurity, and AI requirements into practical governance frameworks, playbooks, and operational processes that enable growth while managing risk.
• Lead high-impact work spanning privacy-by-design, cybersecurity incident response, regulatory compliance, vendor risk, and enterprise data strategy.
• Drive continuous improvement by developing tools, templates, guidance, and operating models that make privacy and governance scalable across the organization.

Requirements / Required Knowledge & Skills

• Strong initiative and a genuine appetite for learning.
• Comfort operating in a fast-growing technology environment and adapting as policies and priorities evolve.
• Deep command of privacy laws and cybersecurity regulatory frameworks.
• Hands-on experience translating privacy-law requirements into practice, including individual rights, de-identification, and data anonymization.
• Ability to translate complex technical and legal concepts for any audience with a solution-oriented mindset.

Qualifications

• J.D. and active membership in good standing of a U.S. state bar.
• CIPP/US or CIPP/E (both preferred).
• 5+ years advising on data privacy at a law firm or in-house, spanning regulatory compliance, complex data and technology transactions, and incident response.
• Track record partnering with cross-functional teams, including IT, security, engineering, and compliance.

Preferred Qualifications

• CIPM or other relevant privacy/cybersecurity certifications.
• Experience advising on HIPAA, healthcare privacy, or regulated health information.
• Familiarity with information security frameworks such as NIST, ISO 27001, and SOC 2.
• Experience supporting global or cross-regional privacy programs, including GDPR.
• Experience with regulatory examinations and audits.

Compensation & Benefits

• Not specified.

Location / Work Conditions

• Remote.
• Flexibility in working hours as needed.
• Some travel, ~10%.