Privacy Counsel

Title	Privacy Counsel
Department	Legal
Reports to	[Chief Privacy Officer / General Counsel / Assistant General Counsel]
Location	[Remote / Hybrid / On-site and location]
Employment type	Full-time
Salary	[Salary range. Postings with a range perform significantly better, and several states require one.]

Position overview

[Company] is hiring Privacy Counsel to advise on the collection, use, sharing, retention and protection of personal information across [products, regions and business units]. The attorney will provide practical legal guidance on [privacy, cybersecurity, consumer protection, marketing, employment data, AI and sector-specific regulation].

Working with Product, Engineering, Security, Data, Marketing, HR, Procurement and Privacy Operations, you will help the organization make informed decisions, structure appropriate safeguards and respond effectively when risk materializes.

Key responsibilities

Key responsibilities

• Interpret privacy and related laws applicable to [Company].
• Advise product and business teams on new features, data uses and AI systems.
• Draft and negotiate data-processing, data-sharing and transfer terms.
• Provide legal advice for privacy assessments and high-risk processing.
• Advise on incidents, notification obligations and regulatory strategy.
• Respond to regulator inquiries, complaints, investigations and disputes.
• Monitor legal change and translate it into prioritized business actions.
• Develop policies, notices, contract language and internal guidance.
• Coordinate with outside counsel and local counsel where needed.
• Support training for legal, privacy and business teams.

Required qualifications

• JD or equivalent legal qualification.
• Active admission and good standing in [specified jurisdiction], or eligibility for applicable in-house registration.
• [Three to seven] years of relevant legal experience in privacy, technology transactions, cybersecurity, consumer law, product counseling, regulatory work or a related field.
• Strong legal analysis, drafting, negotiation and communication skills.
• Ability to give clear, risk-based advice using incomplete or evolving facts.

Preferred certifications

Dedicated privacy counseling experience in [industry or region].; CIPP/[US, E or other relevant concentration].; CIPM, CIPT or AIGP where relevant to the portfolio.; Experience with incidents, regulatory inquiries, ad technology, biometrics, children's data or AI.; In-house experience working directly with product and engineering teams.

Technical knowledge

GDPR, CCPA / CPRA, HIPAA, EU AI Act, privacy impact assessments, data mapping, records of processing.

Essential competencies

Analysis, documentation, judgment, cross-functional collaboration, and clear communication of privacy risk.

Success in the first year

• Business partners receive timely, clear and actionable legal advice.
• High-risk launches and contracts reflect documented privacy decisions.
• Regulatory changes are translated into owned implementation plans.
• Incident and inquiry response is coordinated, defensible and well documented.
• Legal guidance supports innovation while identifying unacceptable risk.

About [Company]

[Two or three sentences about your organization, the maturity of your program, and what the first year looks like. Candidates in this field respond to honesty about whether they are joining a build or an established function.]