Overview
A leading technology company is seeking an experienced privacy attorney to lead its privacy compliance program. This role involves providing practical legal advice on evolving global laws and regulations related to big data, data privacy, data protection, and AI. Reporting to the Director & Assistant General Counsel, Privacy, the successful candidate will develop AI solutions to operate and mature compliance controls and serve as a trusted advisor to business partners across the organization.
Responsibilities
- Lead day-to-day operation of the privacy compliance program, including defining priorities, establishing and tracking metrics and KPIs, and reporting on program health, risks, and maturity.
- Exercise practical business and legal judgment regarding approvals, conditions, declines, or escalations.
- Develop, implement, and continuously improve core program components such as data subject rights requests, data inventory and mapping (ROPA), records of processing, privacy by design, and related policies and processes.
- Develop privacy review processes covering the full data and product lifecycle, from ideation to end of life.
- Draft and update form agreements; counsel on and negotiate data protection provisions in commercial contracts, including data processing addendums (DPAs), standard contractual clauses (SCCs), and data-transfer instruments.
- Monitor, research, and evaluate global privacy and AI laws, legislation, and regulatory guidance; support responses to regulator inquiries, audits, and enforcement.
- Develop, review, and maintain privacy policies, standards, notices, and procedures aligned with legal requirements and best practices.
- Contribute to process improvements that enhance the privacy function and build scalable processes as the business grows.
- Build strong cross-functional relationships and collaborate with legal leaders across commercial, go-to-market, compliance, corporate, and public affairs teams.
- Own the privacy training and awareness program to ensure organizational compliance.
- Advise on privacy and cybersecurity issues as part of incident response teams, including breach assessment, notification analysis, and remediation.
- Provide general legal support on an as-needed basis and contribute to the legal department’s effectiveness and reputation.
Requirements
- Minimum 7 years of relevant legal experience at a top law firm and/or in-house, with at least 5 years focused on privacy and experience building, operating, or leading a privacy compliance program.
- Deep, current knowledge of global privacy frameworks including GDPR/UK GDPR, CCPA/CPRA, and U.S. state privacy laws; familiarity with cross-border data transfer mechanisms such as SCCs, IDTA, adequacy decisions, and the EU-U.S. Data Privacy Framework.
- Working knowledge of privacy program operational components such as DPIAs/PIAs, ROPA and data mapping, data subject rights processes, privacy by design, and vendor/third-party risk management.
- Ability to quickly learn new areas of law and legal skills as business needs evolve.
- Strong understanding of cloud and software technology and interest in related legal issues.
- Experience with platform services for business customers is a plus.
- Familiarity with privacy management tools (e.g., OneTrust) is a plus.
- J.D. from a top-tier law school.
- State bar membership in good standing is required.
- Privacy certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, FIP) preferred; CIPM especially valued for program leadership.
Preferred Qualifications
- Ability to set program direction and drive execution independently, managing competing demands and client expectations.
- Strong judgment in risk assessment and providing concise, actionable, business-focused legal advice.
- Proven ability to build strong relationships across multiple geographies and functions.
- Self-starter comfortable interacting with senior management and influencing without authority.
- Excellent organizational skills and ability to manage multiple cross-functional projects with minimal supervision.
- Outstanding written and verbal communication skills, capable of explaining complex privacy and regulatory concepts to legal and non-legal audiences, including executives.
Compensation & Benefits
- Zone 2 Pay Range: $219,800—$302,300 USD
- Zone 3 Pay Range: $207,600—$285,450 USD
Compensation packages are based on factors including skills, experience, certifications, training, and work location. The total package may include eligibility for annual performance bonuses, equity, and benefits.
Location
This role is based in the United States with potential for remote work depending on location zone classification.
Compliance
Access to export-controlled technology or source code may require a U.S. government license. The employer reserves the right to decline applicants based on licensing requirements.