Counsel II

Job Description – Counsel II – Privacy (Remote)

Reporting to the Assistant General Counsel, Privacy, Data Governance & AI Governance, this Counsel II role is ideal for a naturally curious attorney who thrives at the intersection of technology, regulation, and business innovation. The role will partner closely with the Privacy team and cross-functional stakeholders across Product, Engineering, Marketing, HR, and Sales to help execute and continuously mature the Company's privacy, data governance, and AI governance programs. Beyond day-to-day legal support, this position offers a unique opportunity to shape how these functions scale through process design, governance frameworks, and practical business enablement. We're looking for someone who is energized by building, improving, and influencing evolving programs while delivering pragmatic, business-focused legal guidance.

Responsibilities:

• Provide practical, business-oriented contract support to sales, procurement, and business teams while identifying opportunities to standardize positions and accelerate deal velocity through reusable playbooks and guidance

• Serve as lead counsel for privacy-related commercial transactions, supporting both procurement and customer-facing agreements, including negotiation of data processing agreements, business associate agreements, security exhibits, and other complex privacy and technology terms.

• Scale the privacy program.

• Partner across Product, Engineering, Marketing, HR, Sales, Security, and Legal to embed privacy and responsible data practices into technology, operations, and innovation.

• Translate emerging privacy, cybersecurity, and AI requirements into practical governance frameworks, playbooks, and operational processes that enable growth while managing risk.

• Lead high-impact work spanning privacy-by-design, cybersecurity incident response, regulatory compliance, vendor risk, and enterprise data strategy.

• Drive continuous improvement by developing the tools, templates, guidance, and operating models that make privacy and governance scalable across the organization.

Required Knowledge & Skills:

• Strong initiative and a genuine appetite for learning
• Comfort operating in a fast-growing technology company and adapting as policies and priorities evolve
• Deep command of privacy laws and cybersecurity regulatory frameworks
• Hands-on experience translating privacy-law requirements into practice, including individual rights, de-identification, and data anonymization
• The ability to translate complex technical and legal concepts for any audience with a solution oriented mindset

Basic Qualifications:

• J.D. and active membership in good standing of a U.S. state bar
• CIPP/US or CIPP/E (both preferred)
• 5+ years advising on data privacy at a law firm or in-house, spanning regulatory compliance, complex data and technology transactions, and incident response
• A track record of partnering with cross-functional teams, including IT, security, engineering, and compliance

Preferred Qualifications:

• CIPM or other relevant privacy/cybersecurity certifications
• Experience advising on HIPAA, healthcare privacy, or regulated health information
• Familiarity with information security frameworks such as NIST, ISO 27001, and SOC 2
• Experience supporting global or cross-regional privacy programs, including GDPR
• Experience with regulatory examinations and audits

Work Conditions:

• Flexibility in working hours as needed
• Some travel, ~10%