Director, Legal

Overview

The organization is seeking an experienced privacy attorney to serve as Director, Privacy and provide day-to-day ownership of the global privacy program. This role reports to the VP of Commercial & Privacy and supports privacy compliance across a channel-led, SaaS-enabled cybersecurity business serving more than 12,000 customers worldwide.

This is a builder role for a pragmatic attorney who translates evolving global privacy and data protection requirements into scalable processes. You will partner with Product and Engineering, Security, IT, People, Legal, and other functions to help shape privacy governance.

Responsibilities

• Own day-to-day operation of the global privacy program, including compliance with GDPR, CCPA/CPRA, other US state privacy laws, and other applicable regimes across the US, Canada, Europe, India and Australia, and monitor new laws and regulatory guidance to stay compliant ahead of effective dates.
• Draft, maintain, and improve privacy policies, notices, standards, records of processing, data maps, retention schedules, and internal guidance.
• Conduct and document data protection impact assessments, transfer impact assessments, and privacy reviews.
• Partner with product counsel to embed privacy by design into product development.
• Partner with Product and Engineering on data minimization, purpose limitation, transparency, access, sharing, and retention; review technical specifications and data flows with privacy implications.
• Serve as a primary privacy contact for security and privacy incidents, working with Security Operations and outside counsel to assess notification obligations and manage regulator and customer inquiries.
• Serve as an escalation point for commercial legal and sourcing teams on privacy terms in customer, partner, reseller and vendor agreements, and maintain data processing agreements, subprocessor disclosures, standard contractual clauses, and business associate agreements.
• Handle data subject requests, privacy escalations, and customer and prospect privacy diligence; build playbooks, templates, and training so other teams can move quickly while staying compliant.
• Manage outside counsel and privacy tooling vendors, including scope, budget, and quality of work product.

Requirements

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.
• Seven or more years of relevant legal experience, including substantial privacy and data protection work and meaningful in-house experience at a technology company.
• Deep working knowledge of GDPR, CCPA/CPRA, and other major global privacy frameworks, plus the emerging AI regulatory landscape.
• Demonstrated experience operating a privacy program (not only advising), including assessments, records of processing, data subject requests, vendor review, and advising Product and Engineering on privacy by design and technical data flows.
• Experience supporting privacy and security incident response, including breach analysis and regulator inquiries.
• Strong drafting and negotiation skills covering data processing agreements, standard contractual clauses, and privacy and security terms in commercial contracts.
• Excellent business judgment and a risk-based, solutions-oriented approach, including a demonstrated AI-first mindset, comfort with ambiguity, and strong sense of ownership in a fast-moving environment.
• International Association of Privacy Professionals (IAPP) certification such as CIPP/US, CIPP/E, CIPM, or CIPT is strongly preferred.
• Experience at a cybersecurity, security software, or managed security provider, including security telemetry, log data, and threat intelligence data flows, and channel/MSP data-sharing arrangements.
• Experience with public sector customer privacy requirements across state, local, and education markets in the US, Canada, Australia, and Europe is preferred.

Compensation & Benefits

• Base salary range: 186,000 to 302,000 USD annually.
• Variable incentive compensation.
• New hire equity grants.
• Comprehensive benefits package, including:
  • Equity for all employees
  • Flexible time off and paid volunteer days
  • RRSP and 401k match
  • Training and career development programs
  • Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
  • Robust Employee Assistance Program (EAP) with mental health services
  • Fertility support and paid parental leave

Location

• Not specified in the provided job description.

Additional Information / Security Requirements

• Perform duties in accordance with the organization’s Information Security policies, standards, processes, and controls to protect the confidentiality, integrity, and availability of business information.
• Background checks are required for this position.
• This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR). An offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.