Associate General Counsel, Privacy

Solutus Legal Search

. Own the company’s global privacy legal function and serve as principal legal advisor on domestic and international privacy and data protection matters .

Posted 9/18/2026full-timeRemote • United StatesSeniorLead💰 $260,000 - $295,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in global privacy laws and data protection regulations, including GDPR, HIPAA, and CCPA/CPRA, while effectively managing privacy programs and advising cross-functional teams on compliance and risk management. Proven ability to translate complex legal issues into practical business solutions and drive internal awareness through training and collaboration.

Highest-signal resume keywords

GDPR ComplianceHIPAA RegulationsCCPA/CPRA KnowledgePrivacy Program ManagementData Protection Advisory

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Privacy Risk AssessmentData Subject Request ManagementDPIA ConductingVendor DiligenceRegulatory ComplianceData MappingPrivacy Policy DevelopmentContract NegotiationSecurity Incident ResponseAI and Machine Learning Advisory

Soft Skills

Strong Interpersonal SkillsExcellent JudgmentOrganizational SkillsEffective CommunicationBusiness Orientation

Certifications & Qualifications

U.S. State Bar Membership

Industry Keywords

Data InfrastructureB2B SaaSCross-Border Data TransferPrivacy-by-DesignEmerging Technologies

About the role

Key responsibilities & impact

Own the company’s global privacy legal function and serve as principal legal advisor on domestic and international privacy and data protection matters
Partner with the Security Team and business teams to develop practical, business-oriented approaches to complex privacy issues
Build a scalable, well-documented privacy program covering privacy obligations, customer commitments, and regulatory exposures
Advise on GDPR, HIPAA, CCPA/CPRA, U.S. state and international privacy laws, and international data transfer requirements
Own the data subject request process and privacy elements of vendor and subprocessor diligence
Track regulatory and enforcement developments and translate them into product, contract, and internal-practice changes
Conduct and oversee DPIAs, transfer impact assessments, and related privacy risk documentation
Mature program components including data subject rights, privacy notices, consent management, impact assessments, and policy management
Maintain records of processing, data inventories and mapping, retention schedules, assessments, policies, and notices
Deliver privacy and security training and drive internal awareness
Manage outside counsel and privacy vendors against a budget
Serve as or manage the EU representative and data protection officer relationship
Advise Marketing on adtech, cookies, tracking technologies, and electronic marketing compliance
Report privacy and security risk to leadership and support Board and audit reporting
Embed with product and engineering teams to provide privacy-by-design guidance
Advise on data residency, localization, telemetry, encryption, key management, access controls, logging, anonymization, pseudonymization, retention, and deletion
Advise on AI and machine learning features, including training data provenance, customer data restrictions, model and vendor terms, and emerging AI regulations
Own DPA negotiation strategy and negotiate privacy and security terms in customer and vendor agreements
Support enterprise, public sector, and regulated-industry deals, including HIPAA business associate agreements and financial services and payments obligations
Serve as legal counsel to Security on security commitments, control frameworks, and audit and certification programs
Lead the legal workstream for security incident response, including breach notification, regulator and customer notification, outside counsel and forensics, and tabletop exercises
Advise on law enforcement and government data requests, preservation obligations, and response policies
Support GRC and Compliance on security questionnaires, trust center content, and public privacy and security representations

Requirements

What you’ll need

Strong academic credentials
Membership in good standing with at least one U.S. state bar
7-10+ years of relevant legal experience
Strong training at a top-rated national or international law firm
Law firm and in-house experience at a high-growth B2B SaaS company, preferably in the data infrastructure sector
Significant experience advising on domestic and international privacy and data protection matters
Deep knowledge of global privacy laws and regulatory frameworks, including GDPR, HIPAA, CCPA/CPRA, other U.S. state and international privacy laws, cross-border data transfer requirements, and evolving privacy and data governance regulations
Experience advising business and technical teams on privacy issues across the product lifecycle, including AI, machine learning, and emerging technologies, is strongly preferred
Experience supporting security matters, including customer-facing security commitments, security incident support, and related regulatory requirements, is preferred
Excellent judgment, strong business orientation, and ability to translate complex legal issues into practical advice
Strong interpersonal and communication skills and ability to work effectively with executives and cross-functional stakeholders
Exceptional attention to detail, strong organizational skills, and ability to manage multiple priorities in a fast-moving, high-growth environment

Benefits

Comp & perks

Equity
Generous benefits package