Legal Counsel – Privacy

This is a fully remote position, open to applicants in United States.

📋 Description

• Assess the feasibility of launching Orion in new jurisdictions by managing end-to-end privacy analysis — leveraging AI to draft Data Protection Impact Assessments (DPIAs) and transfer assessments, ensuring decisions are made within days instead of weeks.

• Incorporate privacy-by-design principles into the development lifecycle of Orion, collaborating with Engineering to address data flow and retention issues before they hinder the launch.

• Lead and coordinate responses to data subject rights requests (DSARs) in partnership with Engineering and Customer Success teams.

• Develop and maintain essential components of the privacy program, including processing records, DPIA templates, and breach-response playbooks, utilizing AI-assisted workflows for scalability without increasing headcount.

• Conduct initial reviews of data processing agreements using AI, then finalize positions to reduce turnaround time for customer and vendor DPAs.

• Create lawful cross-border data transfer mechanisms (Standard Contractual Clauses, transfer impact assessments) to enable Orion to confidently serve international clients.

• Establish a self-service privacy review intake system, supported by AI triage, to ensure routine inquiries are addressed swiftly while only unique risks undergo thorough legal assessment.

• Assist the Chief Legal Officer (CLO) and Assistant General Counsel (AGC) by providing clear, actionable guidance that empowers leadership to make informed decisions regarding privacy risks more quickly.

⛳️ Requirements

• A minimum of 4 years of experience in privacy and data protection law, with practical application of GDPR and US state privacy regulations within a technology context.

• Active admission to the US bar; Juris Doctor (JD) from an ABA-accredited law school.

• Demonstrated proficiency with AI tools such as Claude, Gemini, or similar, incorporated into daily workflows, and the ability to design AI-enhanced privacy processes beyond one-time research tasks.

• Experience providing counsel to Product and Engineering teams on privacy-by-design practices, DPIAs, and data flow management.

• Knowledge of cross-border transfer mechanisms, including Standard Contractual Clauses, transfer impact assessments, and adequacy analysis.

• A collaborative and business-oriented mindset: capable of articulating privacy risks in straightforward language and collaborating with stakeholders to develop practical solutions rather than defaulting to rejection.

• Ability to operate independently with a sense of ownership and minimal supervision in a dynamic environment.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Flexible work hours

• Paid time off

• Remote work options