Legal Counsel & Data Protection Officer Job at efficy

Global Data Privacy Counsel

We are looking for a senior attorney with extensive experience in global data pr...

Location

United States , Atlanta

Salary:

Not provided

Arrive

Expiration Date

Until further notice

Requirements

Juris Doctor degree from a reputable, accredited U.S. law school
Active license in good standing with one or more U.S. state bars (Georgia preferred)
10+ years of progressive experience in data privacy and cybersecurity legal matters, with significant in-house experience at a high-growth, technology-driven company
Deep expertise and knowledge of and hands-on experience with U.S. and international data privacy, cybersecurity, and compliance laws and frameworks (including GDPR, CCPA/CPRA, PCI-DSS, ISO certifications, and other relevant global standards) and leading-edge AI regulations and frameworks
Demonstrated success in providing strategic legal counsel that balances risk management with enabling innovation and business growth, particularly in payments and data-driven initiatives
Proven experience leading global privacy and data protection programs, including managing privacy and data protection risk frameworks and governance
Experience managing external counsel, auditors, and regulators
Proven ability to lead, develop, and inspire diverse, global teams, including direct leadership experience with Data Protection Officers and other privacy professionals
Strong business acumen with the ability to translate complex legal concepts into clear, actionable advice that aligns with business objectives and supports deal-making and sales acceleration
Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels, including senior executives and cross-functional teams globally

Job Responsibility

Serve as a trusted strategic legal advisor to executive leadership, business unit and function heads, and the governance committees on global privacy, data protection, and cybersecurity risks, as well as opportunities aligned with rapid business growth and innovation
Design, lead, and continuously evolve the global privacy and data protection program, ensuring it not only meets regulatory requirements but also supports scalable growth and competitive advantage in a fast-paced, high-growth environment
Partner closely with product, technology, payments, data, software and hardware sales, marketing, and strategy teams to embed privacy-by-design and data governance principles into all data-driven and payment-related initiatives
Advise on privacy, data protection, cross-border data processing, and emerging technologies (AI and machine learning), in connection with parking, public transport and other urban mobility technologies and data services (B2B, B2C), to help the company navigate these complex regulatory environments while accelerating innovation
Balance risk management with enabling agility—help business units achieve their ambitious growth objectives without compromising compliance or customer trust
Lead and manage a global, unified privacy and data protection team, including the EU Data Protection Officer and EU Privacy Program Manager, and serve as the global privacy and data protection leader responsible for harmonizing privacy and data protection practices across all regions
Act as the company’s U.S. and Canada Privacy Officer, overseeing all U.S.-specific and Canada-specific aspects of the global privacy and data protection program
Own enterprise-wide development, implementation, and continuous improvement of privacy and data protection policies, standards, and frameworks aligned with relevant global privacy and data protection-related regulations
Develop and maintain a privacy and data protection risk management framework and a dashboard of key privacy metrics to inform leadership decision making and monitor program effectiveness in a high-growth environment
Lead privacy and data protection audits and program assessments to ensure compliance and identify areas for improvement aligned with rapid company growth

New

Head of Legal and Group DPO

ROLE SUMMARY: This is a rare opportunity to combine deep data protection experti...

Location

United Kingdom , London

Salary:

Not provided

International School of Bergamo

Expiration Date

June 05, 2026

Requirements

Qualified lawyer (UK or equivalent) with significant post-qualification experience in data protection
Proven track record of managing data protection compliance across multiple jurisdictions, including building scalable systems, processes, and governance frameworks
Experience with DSARs, breach management, DPIAs, and data protection training programmes
Strong commercial instinct and a healthy risk appetite: you give practical, proportionate advice that helps the business move forward
Comfortable reviewing and drafting commercial contracts and advising on general commercial legal questions
Excellent communicator who can translate complex legal and regulatory concepts for business stakeholders at all levels
Proactive, self-starting, and energised by creating and improving processes, structures, and ways of working
Genuinely excited about working across the full breadth of a legal function, not just data protection

Job Responsibility

Act as the Group's registered Data Protection Officer in the UK and oversee outsourced DPO and data protection service providers across other jurisdictions
Own and evolve a scalable, multi-jurisdictional data protection framework that delivers standardised baseline compliance while accommodating local requirements
Lead on DSARs, breach management, DPIAs, records of processing, and data protection training across the group
Advise the business on data protection matters relating to students, parents, and staff, including the handling of children's data and other special or higher-risk categories of personal data
Monitor regulatory developments (including emerging AI regulation) and translate them into practical guidance for the business
Partner with the Group General Counsel to manage, shape, and develop the legal function as it matures
Review, draft, and negotiate commercial contracts across a range of subject matter
Advise on general commercial legal matters including intellectual property, procurement, and supplier relationships
Support the GC on strategic and ad hoc legal projects as the business requires
Act as a trusted legal adviser to C-suite executives, Heads of School, and Regional CEOs and CFOs

Fulltime

!

New

Head of Legal and Group DPO

This is a rare opportunity to combine deep data protection expertise with broad ...

Location

United Kingdom , London

Salary:

Not provided

International School of Monza

Expiration Date

June 05, 2026

Requirements

Qualified lawyer (UK or equivalent) with significant post-qualification experience in data protection
Proven track record of managing data protection compliance across multiple jurisdictions, including building scalable systems, processes, and governance frameworks
Experience with DSARs, breach management, DPIAs, and data protection training programmes
Strong commercial instinct and a healthy risk appetite: you give practical, proportionate advice that helps the business move forward
Comfortable reviewing and drafting commercial contracts and advising on general commercial legal questions
Excellent communicator who can translate complex legal and regulatory concepts for business stakeholders at all levels
Proactive, self-starting, and energised by creating and improving processes, structures, and ways of working
Genuinely excited about working across the full breadth of a legal function, not just data protection

Job Responsibility

Act as the Group's registered Data Protection Officer in the UK and oversee outsourced DPO and data protection service providers across other jurisdictions
Own and evolve a scalable, multi-jurisdictional data protection framework that delivers standardised baseline compliance while accommodating local requirements
Lead on DSARs, breach management, DPIAs, records of processing, and data protection training across the group
Advise the business on data protection matters relating to students, parents, and staff, including the handling of children's data and other special or higher-risk categories of personal data
Monitor regulatory developments (including emerging AI regulation) and translate them into practical guidance for the business
Partner with the Group General Counsel to manage, shape, and develop the legal function as it matures
Review, draft, and negotiate commercial contracts across a range of subject matter
Advise on general commercial legal matters including intellectual property, procurement, and supplier relationships
Support the GC on strategic and ad hoc legal projects as the business requires
Act as a trusted legal adviser to C-suite executives, Heads of School, and Regional CEOs and CFOs

What we offer

Work at the centre of a global business
Engage with senior leadership daily
Build something
Develop an exceptional skill set
Travel
Join a high-growth organisation

Fulltime

!

Commercial Senior Associate

This is an opportunity to become a Commercial Senior Associate at a reputable fi...

Location

United Kingdom , Manchester

Salary:

65000.00 - 75000.00 GBP / Year

Douglas Scott

Expiration Date

Until further notice

Requirements

Qualified solicitor with a minimum of 5 years PQE in commercial work, possessing expertise in data protection, and ideally, intellectual property and/or IT knowledge
Demonstrated track record in exceptional client care, establishing strong rapport with clients and attracting repeat business
Ability to work independently and with others, providing supervision to junior team members and supporting partners in the team, while committing to continuous personal development
Desire to work in a values-driven organisation, showcasing the willingness to work flexibly and attend offices and clients' premises as needed
Proven capability to take work seriously, while maintaining a grounded and approachable attitude

Job Responsibility

Provide comprehensive legal support to a diverse client base, including businesses in the healthcare, leisure, education, and law sectors, as well as high-profile athletes and organisations in manufacturing, food, insurance, recruitment, and tech industries
Deliver agile and pragmatic solutions tailored to each client's unique needs, while effectively communicating with stakeholders from various backgrounds
Act as an outsourced in-house counsel, handling commercial contract and advisory matters, with a specific focus on data protection and potentially intellectual property and IT expertise

Fulltime

Associate General Counsel - European Data Legal Team

Meta is seeking an experienced attorney to serve as Associate General Counsel. T...

Location

Ireland , Dublin

Salary:

Not provided

Senior Lawyer & Compliance Lead

Prezzee is looking for an ambitious Senior Lawyer & Compliance Lead to join our ...

Location

United States , New York City

Salary:

200000.00 - 240000.00 USD / Year

Prezzee

Expiration Date

Until further notice

Requirements

Exceptional interpersonal skills and ability to manage ambiguity in a cross-functional environment
Strong work ethic with a can-do attitude
In good standing to practice in New York and California and in a common law jurisdiction such as the UK
Minimum of 3 years in a law firm or in-house at a technology or financial services institution
Ability to provide practical advice on outbound and inbound commercial transactions
Expertise in drafting, negotiating, and maintaining commercial agreements typical to the technology and SaaS sectors
Ability to work collaboratively and independently with Sales, Finance, and IT teams
Experience in financial services, competition and consumer, technology, privacy/data protection laws, including financial services and payment regulations

Job Responsibility

Provide legal counsel across all aspects of our global business on commercial, data protection, employment, and intellectual property law, mainly supporting our US and UK offices
Fulfill company secretarial responsibilities and manage certain aspects of regulatory compliance
Collaborate with teams, communicate legal risks, and evaluate risk factors
Manage litigation, apply risk management, and offer practical legal advice
Negotiate with external parties, assist with governance and compliance
Draft agreements, contracts, and provide legal advice to protect company rights
Contribute to policy development, handle complex matters, and clarify legal language
Stay updated on legislation, maintain documentation, and ensure efficient record-keeping
Engage external counsel as needed
Facilitate transparency, maintain high standards, and drive positive change

What we offer

Competitive incentives that reward your success and contribution
Comprehensive health, dental, vision, and 401(k) match benefits
Flexible work hours
Culture Swap Days
Freedom to work from anywhere for 30 days a year
Prezzeeversary Leave – Extra day of annual leave for each year you’re with us
BirthYay Leave – Celebrate you with a paid day off during your birthday month
Parental Leave – 12 weeks for primary carers and 4 weeks for secondary carers
Fun and meaningful events, both virtual and in-person
Employee Resource Groups

Fulltime

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...

Location

United States , San Francisco; New York

Salary:

180000.00 - 270000.00 USD / Year

Airwallex

Expiration Date

Until further notice

Requirements

U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
High degree of ownership, resilience, and pragmatism
comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel

Job Responsibility

Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance

What we offer

Offers Equity
Offers Bonus
medical, dental, and vision insurance
a 401(k) plan
short-term and long-term disability
basic life insurance
well-being benefits
20 paid days of vacation
12 paid days of company holidays

Fulltime

Lead Counsel, Data Privacy

You will join as Senior Lead Counsel, Data & Privacy, with primary responsibilit...

Location

United States

Salary:

160000.00 - 250000.00 USD / Year

Airwallex

Expiration Date

Until further notice

Requirements

U.S. legal qualification (or foreign equivalent) and active license to practice in at least one US jurisdiction
8 years of experience in an in‑house legal department and/or in private practice advising on technology, data and privacy issues related to technical platforms and products
Strong knowledge of US federal and state privacy and data‑security laws (such as CCPA/CPRA and GLBA/Reg P) and how they intersect with payments and broader financial‑services regulation, plus working knowledge of GDPR and Canadian/South American privacy requirements (such as LGPD)
Experience providing guidance on US related privacy adtech requirements and technologies, including varying consent frameworks under US state privacy laws, and operationalizing consent management requirements
Demonstrated experience partnering with technical teams (Product, Engineering, Information Security) to translate legal and regulatory requirements into practical technical designs, controls, and processes
Demonstrated experience advising on emerging US and global AI legal requirements and AI‑governance best practices, and experience advising on AI/ML tools, vendors, or products from a privacy and data‑protection perspective
Experience providing data and privacy legal support during security or privacy incidents, including incident assessment, notification analysis, and remediation planning
Excellent written and verbal communication skills, with the ability to explain complex legal concepts to non‑lawyers and senior executives, and to drive clear decisions in ambiguous, time‑sensitive situations
High degree of ownership, resilience, and pragmatism
comfortable working in a fast‑paced, high‑growth fintech environment and managing multiple complex matters in parallel

Job Responsibility

Serve as lead data and privacy counsel for the US and Americas region, providing risk‑based, business‑oriented advice on US, Canada, and South American, data protection, AI and cybersecurity issues (including cross‑border access and national‑security‑adjacent topics), grounded in global data protection regulation and frameworks
Spearhead AI governance development and implementation globally, providing guidance on relevant global and US AI frameworks and executing a fit-for-purpose AI governance approach at Airwallex, including developing and implementing AI policies, procedures, privacy-related AI mitigations, and accountability frameworks
Develop and help execute privacy and data protection compliance programs for the Americas, specifically focused on compliance with US federal and state consumer financial privacy frameworks (GLBA, FCRA, CalFIPA) compliance, Executive Order 14117, and comprehensive state privacy compliance
Partner closely with Product, Engineering, Information Security, Regulatory Legal, Regulatory Compliance, Commercial Legal and Risk to embed privacy‑ and security‑by‑design in product development, technical architecture, UX, and go‑to‑market, including by spearheading DPIAs/PIAs, AI risk assessments, and other privacy impact assessments
Draft, review, and negotiate complex data protection and data‑sharing terms (including DPAs, cross‑border transfer terms, and AI‑related clauses) with customers, vendors, financial partners, and other third parties, acting as an escalation point for high‑risk matters
Coordinate and oversee international data flows touching the Americas, ensuring appropriate transfer tools and governance (e.g. SCCs or equivalent), and supporting initiatives on data localisation, storage, and access controls
Co‑lead the privacy and data‑protection workstream for security and data incidents related to the Americas with Information Security and other stakeholders, including triage, investigation, regulatory and customer notifications, remediation, and lessons learned
Advise on high‑risk or novel processing activities (e.g. new AI use cases, advanced analytics, innovative platform and embedded‑finance data models), helping structure appropriate safeguards, governance, and documentation
Support interactions with US and Americas regulators and policymakers on privacy, cybersecurity, data‑access and related topics, in close coordination with Regulatory Legal and Regulatory Compliance
Help build and refine tools and processes for privacy workflows (e.g., intake, assessment, DPIA/PIA/DPIA for AI, ROPA, DSRs), including the use of specialist tooling, metrics, and dashboards to track and evidence compliance

What we offer

Offers Equity
Offers Bonus
medical, dental, and vision insurance
a 401(k) plan
short-term and long-term disability
basic life insurance
well-being benefits
20 paid days of vacation
12 paid days of company holidays in a calendar year

Fulltime

Select Country

Legal Counsel & Data Protection Officer

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?