Senior Legal Operations, Privacy Specialist

This is a fully remote position, open to applicants in Arizona, +19 more states.

📋 Description

• Legal Research Expertise: Perform thorough legal research on regulations affecting digital products, including global data privacy laws such as GDPR, CCPA/CPRA, HIPAA, and emerging state laws in the US, translating intricate requirements into actionable business guidance.

• Contractual and Regulatory Assistance: Draft, review, and assess risk for Master Service Agreements (MSAs), Terms of Service, and related agreements and policies, including Data Processing Agreements (DPAs), Partner Agreements, and Business Associate Agreements.

• Regulatory Surveillance: Serve as the legal team’s monitor, keeping track of legislative changes, enforcement trends, and security standards to ensure the organization stays proactive in compliance matters.

• Incident Response Assistance: Support counsel with the legal administrative tasks involved in data incident response, investigations, and reporting responsibilities.

• Process Improvement: Analyze, design, and implement scalable processes for the legal team, focusing heavily on maintaining ticketing systems, privacy impact assessments (PIAs), and intake workflows.

• Management of Legal Technology: Act as the designer, administrator, and/or subject matter expert for legal tools and Contract Lifecycle Management (CLM) systems.

• Metrics and Reporting: Establish, monitor, and report on key operational metrics for the legal department to demonstrate its value and pinpoint bottlenecks.

• Vendor and Budget Management: Assist in overseeing relationships with outside counsel and vendors, including billing, implementation, and tracking expenses against the budget.

• Compliance Assistance: Help prepare and disseminate annual questionnaires and feedback surveys for compliance training, maintain or improve compliance policies and processes, and manage the organization’s compliance calendar.

• Knowledge Management: Standardize legal knowledge and communication to ensure information is preserved, accessible, and up-to-date.

• Data Governance Frameworks: Collaborate with IT, Security, and Product teams to develop and sustain the company’s data mapping, data inventory, and records retention schedules.

• Policy Oversight: Manage the lifecycle of internal and external compliance policies, ensuring regular reviews, updates, and alignment with organization-wide training.

• Corporate Governance and Record Keeping: Provide research, project management, and regulatory filing support for broader corporate governance initiatives, including maintaining secure repositories of corporate records, consents, and compliance certifications.

• Support for Insurance Programs: Facilitate claims reporting to insurance providers and assist with insurance renewals.

⛳️ Requirements

• At least 4 years of experience as a paralegal, legal operations professional, or a combination of both (preferably within a SaaS company operating in a highly regulated environment).

• High Level of Trust: Demonstrate discernment to operate with a high degree of discretion, confidentiality, and legal acumen while being a collaborative partner for less sensitive business initiatives.

• Privacy Knowledge: Proven expertise in data privacy and security frameworks, with a solid understanding of DPAs and data flow within an organization.

• Research Proficiency: Outstanding legal research skills utilizing tools such as Westlaw, LexisNexis, or relevant regulatory databases.

• Corporate Entity Oversight: Established expertise in US entity management and corporate administrative and compliance functions, with extensive experience in entity structuring and transactions.

• Technology Aptitude: Experience in designing and implementing legal operations technology (CLM, outside counsel spend management, privacy compliance software and systems) and a strong familiarity with standard enterprise tools (Slack, Jira, Google Workspace).

• Effective Communication: Ability to simplify dense legal information into clear, actionable advice for non-legal stakeholders.

• Resilience in Uncertainty: Comfortable working in an environment where priorities may shift and processes are designed for adaptability, rather than strict adherence.

• Must be a full-time resident of the contiguous United States (legally authorized to work in the US presently and in the future without sponsorship).

🏝️ Benefits

• Internet: Commitment to maintaining access to strong, reliable internet for our remote work, except when on vacation or holidays.

• Security: Adherence to the highest security practices to protect the privacy and security of Coforma and client information, even while on vacation.

• Travel Flexibility: Willingness to attend in-person events such as meetings, workshops, and training sessions, with prior notice for projects that necessitate it.

• Brand Representation: Professional representation of Coforma, embodying our Company Values in all interactions.