Senior Privacy Counsel

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of key components of Abnormal AI's global privacy program, encompassing legal judgment, operational execution, oversight, and AI-driven tools.

• Provide guidance to product and engineering teams on privacy-by-design principles for an AI-native platform and assist in AI governance from a legal and privacy perspective.

• Offer product-privacy legal advice in collaboration with the Director, Legal (Product).

• Collaborate with the Privacy Manager to manage daily privacy operations, which include DSARs, assessments, ROPA, notices, and audits.

• Develop and implement AI-enabled privacy workflows in partnership with Legal Operations and engineering teams.

• Contribute to the implementation and ongoing enhancement of the global privacy program across GDPR/UK GDPR, EU AI Act, NIS2, DORA, EU Data Act, US state privacy laws, and other international regulations.

• Provide counsel regarding international data transfers, including SCCs, UK IDTA, EU–US Data Privacy Framework, and transfer impact assessments.

• Oversee the daily execution of the AI governance program, including EU AI Act classification and associated obligations.

• Integrate privacy considerations into AI-driven features, such as model data governance, secondary data-use analysis, behavioral-AI privacy implications, and vendor diligence.

• Supervise privacy operations related to data-subject rights, data mapping, DPIA/PIA/TIA/LIA, retention, consent and cookie management, and audit support.

• Keep abreast of emerging privacy and AI regulations and translate guidelines into product, market-entry, contracting, and go-to-market strategies.

• Serve as the privacy escalation point for vendor, subprocessor, and customer agreements, including DPAs, SCCs, and subprocessor terms.

• Provide advice and leadership on the privacy and legal aspects of incident response, breach evaluation, notifications, and mitigation efforts.

• Assist the DPO function and engage with supervisory authorities, customer privacy audits, and security questionnaires.

⛳️ Requirements

• J.D. from an accredited law institution.

• Active member in good standing of at least one U.S. state bar.

• CIPP/E and CIPP/US certifications.

• 6–8+ years of pertinent experience in privacy and data protection law and program implementation.

• Extensive, up-to-date knowledge of European privacy and digital regulations, including GDPR/UK GDPR, with familiarity in NIS2, DORA, EU AI Act, and EU Data Act.

• Experience working with or advising technology firms, preferably in cybersecurity, SaaS, or cloud sectors, including AI/ML products.

• Proven track record in contributing to and managing a privacy program in a dynamic, global setting.

• Experience in providing legal counseling for products in conjunction with privacy.

• Strong drafting skills and judgment regarding DPAs, SCCs, and subprocessor agreements.

• Capability to take charge of initiatives and see them through to completion with minimal supervision.

• Proficiency in leading through influence and convincing diverse senior stakeholders.

• Exceptional communication and presentation abilities.

• Proficient with AI tools and capable of building, prototyping, iterating, and refining automation workflows to a high standard of accuracy, subject to human review.

🏝️ Benefits

• Competitive salary

• Comprehensive benefits package

• Equity options

• Potential for bonus or incentive compensation

• Clear advancement path toward greater program ownership

• Opportunity to create AI automation that transforms privacy operations

• Chance to work at the crossroads of privacy, AI governance, product counseling, and security