Senior Privacy Counsel

The role

The Senior Privacy Counsel will own significant portions of the global privacy program, including legal judgment and operational execution. This role involves advising product and engineering on privacy for an AI-native platform and building AI-enabled automation to scale the program.

What you will do

• Support the design and implementation of the global privacy program.
• Advise and execute on international data transfer strategy.
• Drive the day-to-day execution of the AI governance program.
• Partner with R&D to embed privacy into the design of AI-driven features.
• Oversee privacy operations including DSARs, data mapping, and impact assessments.
• Design, deploy, and improve AI-enabled privacy workflows.
• Monitor emerging legal and regulatory developments.
• Serve as the privacy subject matter escalation point for vendor and customer contracts.
• Advise on and help lead privacy and legal aspects of incident response.
• Support the DPO function and regulatory engagement.

Required qualifications

• J.D. from an accredited law school
• Member in good standing of at least one U.S. state bar
• CIPP/E, CIPP/US certifications
• 6-8+ years of relevant experience, with strong depth in privacy and data protection law and program execution
• Deep, current expertise in European privacy and digital regulation — GDPR/UK GDPR and working familiarity with NIS2, DORA, the EU AI Act, and the EU Data Act
• Demonstrated experience operating in or advising technology companies, ideally in cybersecurity, SaaS, or cloud, including AI/ML products
• Meaningful experience contributing to and helping run a privacy program in a fast-moving, global environment
• Experience providing product legal counseling alongside privacy
• Strong drafting and judgment on complex privacy agreements (DPAs, SCCs, subprocessor terms)
• Excellent communication and presentation skills
• Fluency with AI tooling and the ability to build and iterate on automation workflows

Nice to have

• Experience supporting a DPO, including familiarity with independence and governance expectations
• Familiarity with privacy and data protection regimes beyond the EU/US — e.g., LGPD (Brazil), PIPEDA (Canada), APPI (Japan)
• Experience supporting Works Councils and multi-jurisdiction employee/candidate privacy
• Experience with privacy tooling and with AI/LLM-based workflow automation
• Familiarity with security and privacy audit frameworks (SOC 2, ISO 27001/27701/42001)
• CIPM, CIPT, AIGP certifications

Benefits

• Competitive salary
• Benefits
• Equity

Before you apply

• If application is successful, Abnormal AI will carry out pre-employment checks which must be successfully completed to progress to a final offer.

About the company

Abnormal AI is an AI-native cybersecurity company that uses behavioral AI to stop attacks. Their products depend on processing data responsibly at scale across global jurisdictions.