Overview
A cybersecurity company specializing in AI-native solutions is seeking a Senior Privacy Counsel to lead significant aspects of its global privacy program. This role involves legal judgment, operational execution, and the development of AI-enabled tools to support privacy initiatives at scale across multiple jurisdictions.
Responsibilities
- Lead the design, implementation, and continuous improvement of the global privacy program, ensuring compliance with GDPR/UK GDPR, EU AI Act, NIS2, DORA, EU Data Act, US state privacy laws, and other international frameworks.
- Advise on and execute international data transfer strategies including SCCs, UK IDTA, EU–US Data Privacy Framework, and transfer impact assessments.
- Manage day-to-day AI governance execution from a legal and privacy perspective, including EU AI Act classification and obligations.
- Collaborate with product and engineering teams to embed privacy by design into AI-driven features, including model data governance and secondary data use analysis.
- Establish privacy diligence standards for AI/LLM vendors and model providers.
- Provide ongoing product and privacy legal counseling to research and development teams.
- Oversee privacy operations in partnership with the Privacy Manager, including DSARs, Records of Processing Activities, impact assessments, retention, consent management, and audit support (SOC 2, ISO 27701/42001).
- Design, deploy, and improve AI-enabled privacy workflows to scale the privacy program, working closely with Legal Operations and engineering teams.
- Monitor emerging legal and regulatory developments related to privacy and AI, advising on market entry and product launch decisions.
- Serve as the privacy escalation point for vendor, subprocessor, and customer contracts, partnering with senior legal leadership to set privacy positions.
- Advise on privacy and legal aspects of incident and breach response, including AI-related incidents.
- Support the Data Protection Officer function by conducting assessments and serving as a contact for supervisory authorities, customer audits, and security questionnaires.
Requirements
- Juris Doctor (J.D.) from an accredited law school and active membership in at least one U.S. state bar.
- CIPP/E and CIPP/US certifications.
- 6-8+ years of relevant experience with strong expertise in privacy and data protection law and program execution.
- Deep knowledge of European privacy and digital regulations, including GDPR/UK GDPR, NIS2, DORA, EU AI Act, and EU Data Act.
- Experience advising or operating within technology companies, preferably in cybersecurity, SaaS, cloud, or AI/ML products.
- Proven track record contributing to and managing privacy programs in fast-paced, global environments.
- Experience providing product legal counseling alongside privacy advice.
- Pragmatic judgment focused on enabling business objectives while ensuring compliance.
- Strong drafting skills and judgment on complex privacy agreements (DPAs, SCCs, subprocessor terms).
- Ability to handle novel and ambiguous issues with accountability and escalate when necessary.
- Self-driven with the ability to lead initiatives independently and influence senior stakeholders.
- Excellent communication and presentation skills for explaining complex privacy issues.
- Proficiency with AI tools and experience building and refining AI-enabled automation workflows with high accuracy and human review standards.
Preferred Qualifications
- Experience supporting a Data Protection Officer, including governance and independence aspects.
- Familiarity with privacy regimes beyond EU/US, such as LGPD (Brazil), PIPEDA (Canada), APPI (Japan).
- Experience with employee and candidate privacy across multiple jurisdictions and Works Councils.
- Knowledge of privacy tooling and AI/LLM-based workflow automation.
- Familiarity with security and privacy audit frameworks like SOC 2, ISO 27001/27701/42001.
- Additional certifications such as CIPM, CIPT, or AIGP.
Compensation & Benefits
- Base salary range: $199,800 to $235,000 USD.
- Eligibility for bonus or incentive compensation.
- Equity participation.
- Comprehensive benefits package.
Actual compensation will be determined based on skills, experience, qualifications, and geographic location.
Location
Not specified.