Sr. Counsel, Privacy Compliance

Overview

This role involves serving as a trusted advisor on privacy matters and maturing the organization’s privacy program. You will lead legal initiatives that translate evolving global privacy and AI requirements into practical, business-focused guidance and help develop AI-enabled solutions to operate and strengthen privacy processes and controls.

Responsibilities

• Privacy legal advice and regulatory interpretation: Advise on compliance with global privacy and data protection laws, including GDPR, CCPA/CPRA, ADMT, and other U.S. state laws; monitor legal and regulatory developments and translate them into actionable guidance.
• Privacy program & governance leadership: Build and mature the privacy program to meet evolving regulatory expectations, including contributions to AI governance. Develop core compliance components such as:
  • data subject rights requests
  • privacy notices
  • consent management
  • PIA/DPIAs
  • policy management
• Risk assessments: Conduct gap analysis and risk assessments, including Data Protection Impact Assessments (DPIAs), Privacy Impact Assessments (PIAs), and transfer impact assessments. Support records of processing activities (RoPA) and help mitigate privacy risk.
• Contract negotiation and transactions: Draft and update form agreements; counsel on and negotiate data protection provisions in commercial contracts, including data processing addendums (DPAs), standard contractual clauses (SCCs), and related data-transfer instruments.
• Policies, training, and governance: Develop and maintain internal privacy policies and external privacy notices and standards. Design and deliver privacy training and awareness programs. Help operationalize privacy and AI governance frameworks and support cross-functional privacy committees.
• Cross-functional collaboration: Build strong relationships and partner with other legal and business leaders (commercial, go-to-market, compliance, corporate, and public affairs) on privacy issues.
• Practical legal judgment: Determine when to approve, approve with conditions, decline, or escalate.
• Additional legal support: Provide general legal support on an as-needed basis across other business areas.

Requirements

• 7+ years of relevant legal experience at a top law firm and/or in-house (a combination is a plus), including 5+ years focused on privacy.
• Demonstrated experience building, operating, or leading a privacy compliance program (not solely advisory work).
• Deep, current knowledge of global privacy and AI frameworks, including:
  • GDPR/UK GDPR
  • CCPA/CPRA
  • EU AI Act
  • U.S. state comprehensive privacy and AI laws
  • cross-border data transfer mechanisms (SCCs, IDTA, adequacy, EU-U.S. Data Privacy Framework)
• Working knowledge of privacy program building blocks, including DPIAs/PIAs, RoPA and data mapping, data subject rights processes, privacy by design, and vendor/third-party risk management.
• Technical proficiency in using AI tools to build skills, agents, and other automated tasks.
• Ability to operate as a generalist and learn new areas of law quickly as the business evolves.
• Strong understanding of cloud and software technology, with a desire to work on legal issues in these areas.

Preferred Qualifications

• Experience working for a company offering platform services to business customers.
• Familiarity with privacy management tooling (e.g., OneTrust or comparable).
• J.D. from a top-tier law school.
• One or more privacy certifications (e.g., CIPP/E, CIPP/US, CIPM, CIPT, FIP); CIPM is particularly valued for a program-leadership role.

Licensure

• State bar membership required, in good standing.

Compensation & Benefits

Pay Range Transparency

Expected salary range for non-commissionable roles:

• Zone 2 Pay Range: $219,800—$302,300 USD
• Zone 3 Pay Range: $207,600—$285,450 USD

The total compensation package may also include eligibility for an annual performance bonus, equity, and benefits. Actual compensation packages are based on factors including job-related skills, depth of experience, relevant certifications and training, and specific work location.

Location

United States (pay ranges provided by zone; specific location not stated in the posting).

Compliance

If access to export-controlled technology or source code is required for performance of job duties, it is within the employer’s discretion whether to apply for a U.S. government license for such positions, and the employer may decline to proceed with an applicant on this basis alone.