Legal Counsel, Privacy, AI, & Digital Governance

The role

This person will support privacy and AI governance initiatives by translating legal requirements into business practices. They will work with the Associate General Counsel to manage privacy documentation, risk assessments, and regulatory compliance.

What you will do

• Execute legal, operational, and transactional program activities for privacy and AI governance.
• Manage annual updates to privacy program documentation including notices, contracts, and policies.
• Manage legal review and escalations for privacy and AI rights requests.
• Support privacy program operations for marketing technologies, website operations, and cookie consent.
• Assist in identifying and addressing privacy and AI-related legal considerations.
• Support adherence with GDPR, CCPA/CPRA, emerging U.S. state privacy laws, and AI regulatory frameworks.
• Conduct privacy and AI impact assessments and assist with risk evaluation and mitigation.
• Monitor legal and regulatory developments related to privacy, data protection, and artificial intelligence.

Required qualifications

• Juris Doctor (J.D.) degree or equivalent legal experience.
• 3–5 years of experience supporting privacy, data protection, AI governance, cybersecurity or technology-related functions.
• Working knowledge of privacy laws and regulations, including GDPR, CCPA/CPRA, HIPAA, GLBA, and other emerging privacy requirements.
• A strong interest in AI governance, AI risk management, or emerging AI regulatory frameworks.
• Ability to interpret legal and regulatory requirements and translate them into practical business solutions.
• Strong project management and organizational skills.
• Excellent written and verbal communication skills.
• Strong attention to detail and analytical problem-solving abilities.
• Collaborative mindset and ability to work effectively across multiple business functions.

Nice to have

• Experience supporting privacy programs within a SaaS or high-growth technology company.
• Experience conducting privacy impact assessments, AI risk assessments, or vendor reviews.
• Experience managing transactional privacy operations such as policy development, training, incident response, vendor risk management, and appropriate data use.
• Familiarity with AI governance frameworks such as the NIST AI Risk Management Framework, ISO standards, or emerging AI regulations.
• Experience partnering with cross-functional teams, such as Legal, Security, Risk, Security, and Product teams to operationalize regulatory requirements.
• In-house experience supporting privacy, security, or responsible AI initiatives.
• Passion for helping organizations build trustworthy, and responsible technology and governance practices

Benefits

• Comprehensive health, life, and disability insurance
• 4 weeks of vacation
• 12 company holidays
• Parental leave
• Volunteer time off
• 401k plans with up to 6% company match
• $2000 Paid-Paid Vacation bonus
• EAP through Headspace

Before you apply

• Employment is contingent on passing both a background and credit check.

About the company

BambooHR is a people intelligence platform that transforms HR. They are a market leader driving innovation through thoughtful, sustainable growth.