Senior Director, Head of Cybersecurity & Privacy Legal

Overview

A leading technology organization is seeking a Senior Director, Head of Cybersecurity & Privacy Legal to lead its global data security and privacy legal function. This senior leadership role involves developing and executing a global legal strategy for cybersecurity, data security, and privacy that supports rapid growth and product innovation. The position reports directly to the Deputy General Counsel for Commercial Legal and serves as a trusted advisor to senior leaders, including the executive team and board of directors. The role is ideally hybrid based out of San Jose, CA headquarters but can be fully remote for the right candidate.

Responsibilities

• Provide expert legal guidance on data security, cybersecurity, privacy, and compliance matters, ensuring integration of legal requirements into technical operations
• Lead legal aspects of incident management and response, offering strategic advice on security incidents to navigate complex events effectively
• Advise on and support implementation of Privacy/Security by Design principles across the expanding platform
• Manage and mentor a privacy team of four experienced privacy lawyers

Requirements

• J.D. from an accredited law school and active license to practice law in the United States
• 15+ years of legal experience focused on data security, cybersecurity, and privacy within SaaS, software, technology, or cybersecurity sectors
• Significant experience managing cyber incident response in partnership with security teams
• Proven track record negotiating security and privacy components of complex commercial contracts
• Experience advising executive leadership and boards on cybersecurity and privacy matters
• Expertise in guiding Privacy/Security by Design implementation in technology companies
• Experience managing global legal teams and leading cross-functional initiatives in SaaS, software, technology, or cybersecurity environments
• Deep understanding of cloud architecture and data flows in modern SaaS ecosystems
• Comprehensive knowledge of global privacy and AI laws, regulations, and certifications including GDPR, CCPA/CPRA, EU AI Act, and other international frameworks
• Pragmatic legal approach prioritizing business enablement and creative risk management

Preferred Qualifications

• Experience working with EU Works Councils and global regulatory agencies
• Knowledge of AI governance and machine learning data ethics
• Familiarity with risk mitigation frameworks and corporate governance for enterprise deployment of generative AI, large language models (LLMs), and automated decision-making systems
• Relevant certifications such as CISM, CISSP, and/or CIPP

Compensation & Benefits

• Base salary range: $231,000 to $330,000 USD (excluding commission, bonus, equity, and benefits)
• Comprehensive benefits including various health plans, vacation and sick time, parental leave, retirement options, education reimbursement, and in-office perks

Location

• Hybrid role based in San Jose, California headquarters preferred; fully remote considered for qualified candidates

Equal Opportunity

The organization is committed to equal employment opportunities and fostering an inclusive environment that values diverse backgrounds and perspectives. All qualified applicants will be considered without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other protected characteristic under applicable laws.

Reasonable accommodations are provided during the recruiting process for candidates with disabilities, long-term conditions, mental health conditions, sincerely held religious beliefs, neurodivergence, or pregnancy-related needs.