Privacy and Product Counsel

Role Overview

• Designing, improving, and implementing our global privacy and data protection compliance programs and processes, as well as educating our teams about relevant privacy and data protection laws.
• Developing and overseeing Bonterra's AI governance and compliance program, including policies, risk assessments, and controls to address privacy, transparency, and ethical considerations in AI and machine learning systems.
• Drafting and maintaining privacy and data protection policies, notices or other documentation, as well as managing privacy and data protection terms in standard contractual arrangements and supporting negotiations with vendors and customers.
• Working closely with the product, engineering, information security and IT teams to support our security initiatives, frameworks, and requirements.
• Monitoring and advising on regulatory and industry developments, including trends in copyright, privacy, security, and AI laws, regulatory guidance, enforcement actions, and public policy.
• Partnering with product and engineering teams to provide guidance on legal issues related to product design, development, and operations, with specific attention to copyright, privacy, data protection, and the responsible use of AI and automated decision-making tools.
• Creating and developing legal processes and documentation to support new product or other business initiatives.
• Providing cross-functional leaders with pragmatic and strategic advice to minimize legal risks while advancing business goals and initiatives.
• Partnering with key stakeholders across the organization to build strong relationships across levels.
• Identifying opportunities to centralize knowledge and create scalable processes to increase visibility and expedite communication/alignment/execution.

Requirements

• J.D. (or LL.M. plus foreign law degree) and a member of a U.S. state Bar in good standing.
• 5+ years of related legal experience, with a focus on privacy and product counseling, advising software companies specifically.
• Strong knowledge of privacy and data protection laws (including CCPA, CPRA and GDPR) required.
• CIPP certification preferred.
• Experience advising on AI governance, including privacy implications of AI systems, automated decision-making, and emerging AI regulations required.
• Team player with strong business acumen and attention to detail plus recognition that the role is about doing as well as creating a scalable foundation.
• Excellent written and verbal communication skills with the ability to break down complex legal concepts into easy-to-understand and practical advice.
• Ready to tackle projects large and small with a collaborative, low-ego approach.
• Self-starter with the ability to work independently.

Benefits

• Comprehensive benefits package that supports your health, well-being and growth
• Bonuses, incentives, equity, and a comprehensive benefits program