Overview
This role serves as the primary legal advisor on privacy, data security, and AI governance matters. You will build and maintain the organization’s privacy and AI compliance programs, advise product and engineering teams on data practices, and manage one direct report (GRC Analyst).
Responsibilities
- Advise on global privacy and data protection laws (CCPA/CPRA, state privacy laws, GDPR where applicable), including data subject rights, cross-border transfers, and vendor data processing
- Develop and maintain the company’s AI governance framework, including policies on responsible AI use, automated decision-making, and emerging AI regulations
- Lead privacy and security incident response, including breach notification analysis and regulatory reporting
- Draft, negotiate, and review data processing agreements, BAAs, and privacy-related contract provisions
- Partner with information security on risk assessments, security policies, and compliance certifications (SOC 2, ISO 27001)
- Manage regulatory inquiries and enforcement actions from data protection authorities
- Conduct privacy impact assessments and AI risk assessments for new products, features, and vendor implementations
- Monitor legislative and regulatory developments across privacy, cybersecurity, and AI, and translate them into actionable guidance
- Build and deliver training programs on data handling, privacy obligations, and responsible AI use
- Manage and develop GRC Analyst, including setting priorities and reviewing work product
Qualifications
- JD from an accredited law school; active bar membership in good standing
- 5-7+ years of legal experience, with at least 3 years focused on privacy, data security, or technology law
- Working knowledge of major privacy frameworks (CCPA/CPRA, GDPR, HIPAA as applicable) and familiarity with AI regulatory developments (EU AI Act, NIST AI RMF, state AI legislation)
- Experience with incident response and breach notification processes
- Ability to translate technical and regulatory complexity into practical business guidance
- Experience managing or mentoring junior team members
Preferred Qualifications
- CIPP/US, CIPP/E, or CIPM certification
Compensation & Benefits
- Pay Range: $121,884.70 - $191,533.10
- Incentive Compensation: Eligible to participate in the annual incentive plan. Incentives are earned based on employee performance against defined metrics and company goals.
- Benefits (Full-time): Comprehensive benefits program including medical, dental, and vision coverage. Option to contribute to a 401(k) plan that includes a company match.
Location
Remote, US
Important Notices
- Recorded Interviews: Interviews may be recorded and transcribed for evaluation purposes in accordance with applicable privacy laws. Participation includes consent to recording and transcription.
- Interview Integrity: AI may be used during the selection process. Candidates should still submit applications and conduct interviews reflecting their own thinking. Misrepresentation at any stage may result in removal from consideration for this and future roles.
- How Applications Are Reviewed: AI tools may be used to help review, screen, schedule interviews, and assess applications, supporting the team’s review. Hiring decisions are made by a person.
Equal Opportunity Statement
The organization is committed to building a diverse and inclusive workplace and encourages candidates from all backgrounds to apply, even if they do not meet every qualification listed.