Counsel, Privacy, AI & Data Protection

In this role you will provide legal leadership on AI governance, privacy, and data protection across global operations. You will partner with AI/Data teams to implement controls and document Responsible AI practices. You will oversee DPIAs/PIAs and privacy program artifacts, and advise on vendor diligence and contracting. You will shape the privacy program and train cross-functional teams while navigating evolving global laws. This role supports responsible innovation and regulatory compliance.

• Hybrid working: 2-3 days in office
• Capital-forming benefits
• Company pension plan contribution
• Childcare/kindergarten subsidy
• Corporate fitness subsidy

• Provide legal leadership on AI governance and responsible adoption of AI/ML/LLMs, including risk-based reviews, controls, documentation, and oversight mechanisms
• Monitor AI regulatory developments and develop internal guidance aligned to evolving global frameworks
• Collaborate with AI/Data teams to implement legal, technical, and operational requirements for AI solutions; review Responsible AI documentation
• Advise on privacy and data protection laws and embed privacy-by-design into products and operations
• Lead/privacy impact assessments (DPIAs/PIAs) and maintain core privacy artifacts
• Partner with Marketing/digital teams on privacy requirements for cookies, pixels, SDKs, analytics, and consent management
• Provide legal support for cybersecurity programs, including incident response planning and investigations
• Draft, review, and negotiate data protection and technology contracts; support procurement and vendor management
• Conduct privacy and AI vendor due diligence and governance reviews
• Develop internal/privacy governance policies and create external-facing privacy documentation; drive training and awareness programs
• Shape and execute a roadmap for privacy and AI initiatives to support business growth and product expansion

• Juris Doctor (JD) with active bar membership or ability to obtain/maintain as required
• 5+ years of relevant legal experience focusing on privacy, data protection, cybersecurity, and AI governance
• Hands-on experience building and operationalizing AI governance principles, controls, and documentation
• Experience advising cross-functionally and translating regulatory obligations into pragmatic business solutions
• Strong drafting and negotiation skills for data-related and technology agreements including vendor and privacy terms

• Cross-functional collaboration
• Strong communication
• Pragmatic problem solving
• Knowledge of global privacy laws; privacy-by-design
• DPIAs/PIAs
• Vendor diligence and governance