Privacy Legal Counsel

• Serve as a trusted advisor on global data protection laws and regulatory developments (e.g., GDPR, CCPA, US state legislation, AI-related privacy legislation, and more), translating complex requirements into actionable business guidance.
• Draft, review, and negotiate privacy contract terms, including data processing agreements (DPAs), business associate agreements (BAAs), and vendor agreements.
• Build and improve internal privacy policies, documentation, and operational processes across the organization.
• Collaborate with teams across the company to embed privacy-by-design principles into product development and company processes.
• Partner with Security, Compliance, and Engineering teams to assess data use, storage, retention, and access across systems - driving alignment between legal obligations and technical implementation.
• Conduct privacy impact assessments (PIAs), data protection impact assessments (DPIAs), and risk analyses for new products, features, tools, and vendors.
• Respond to internal and external privacy-related questions, audits, or escalations - including customer and partner inquiries - with clear, practical advice and requirements.
• Support vendor risk assessments and onboarding processes to ensure privacy compliance across third-party tools and services.
• Support privacy governance for both external features and internal tools.
• Monitor global regulatory changes, market trends, and enforcement actions to anticipate impact and proactively adapt the company's privacy practices.
• Partner with Security and other stakeholders on cyber resilience and incident readiness, remediation, and process improvement.
• Drive privacy projects from start to finish, aligning priorities, setting clear timelines, and ensuring delivery.
• Serve as a point of contact for cross-team privacy enablement and training, building awareness and scalable know-how throughout the company.

• Excellent attorney with 4+ years of demonstrated and relevant legal experience working in-house at a technology company or at a law firm, specializing in privacy.
• In-depth understanding and experience with key global privacy regulations and frameworks, with the ability to apply them in a practical, business-aligned way.
• Experience advising on privacy considerations in AI and data-driven products.
• Proficiency in drafting, negotiating, and managing privacy terms and agreements, including privacy policies, DPAs, BAAs, and vendor contracts.
• Passion for technology and the ability to understand product, technical, and business aspects quickly and effectively.
• Experience working in fast-paced environments and adapting to shifting priorities and deadlines.
• Strong sense of ownership, initiative, and accountability - you are independent, take responsibility and see things through.
• Collaborative, with excellent interpersonal and communication skills and a can-do mindset.
• Strong legal and business judgment, creative and pragmatic problem-solver who can find scalable solutions to complex issues.
• Fluency in written and spoken English.
• CIPP/E and/or CIPP/US certifications are an advantage.

Mploy