Corporate Counsel, Privacy, Data

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Implement global privacy compliance initiatives (GDPR, CPRA), which include crafting data processing frameworks, privacy policies, and Data Processing Agreements (DPAs).

• Oversee daily privacy operations, such as conducting data protection impact assessments, managing data subject rights (DSARs), and providing internal guidance.

• Collaborate with internal teams (Product, Security, IT) to ensure privacy practices align with business goals and regulatory requirements.

• Serve as the key internal resource for privacy risk and obligations related to customer/vendor data, escalating high-risk issues to executive leadership.

• Lead negotiations for commercial contracts, SaaS agreements, and data licenses, ensuring intellectual property protection and risk mitigation.

• Keep internal redline standards, fallback clauses, and negotiation playbooks updated and maintained.

• Optimize the contract lifecycle management (CLM) process to address inefficiencies and expedite deal cycles for Sales and Finance.

• Assess and negotiate vendor agreements, analyzing third-party risks and ensuring adherence to contract stipulations.

• Provide legal insights to Product and Engineering teams regarding the legal aspects of new features, public APIs, and platform policies.

• Draft and update public-facing terms of service, API usage policies, and acceptable use guidelines.

• Offer legal support to HR on employment-related issues such as contractor classifications, policies, and global employment frameworks.

• Assist with corporate governance requirements, including preparation of board documentation and compliance reporting.

• Manage the legal operations infrastructure, including tools, templates, and tracking of matters.

• Conduct internal training sessions (particularly on data privacy) throughout the organization.

• Coordinate workflows with external legal administrative support and work alongside specialized outside counsel on complex issues.

⛳️ Requirements

• Juris Doctor (J.D.) from an accredited law school and an active license to practice law in at least one U.S. state.

• 3-5+ years of relevant legal experience, with a preference for at least 1-2 years of in-house experience at a SaaS or technology firm.

• Knowledge of SaaS procurement models, SOC 2 requirements, or vendor security review processes.

• Experience with or a strong understanding of public APIs and open-access data terms.

• Familiarity with managing legal technology tools (CLM software) and working with outside counsel.

• Certified Information Privacy Professional (CIPP) certification is highly desirable.

• Extensive experience in SaaS commercial law, data/privacy law, and basic employment law.

• Proven track record in fostering internal trust and building strong relationships with business partners.

• Exceptional time management skills with an ability to work independently in a fast-paced, high-velocity environment.

• Comprehensive knowledge of federal, state, and global privacy regulations (GDPR, CCPA/CPRA).

• Strong analytical, problem-solving, and contract negotiation abilities.

🏝️ Benefits

• Equal opportunity employer

• Value diversity