This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Bumble’s mission is to foster healthy and equitable relationships across the globe. As a platform built on trust and integrity, we’re deeply committed to protecting our members’ data and privacy. We are seeking a strategic and solutions-oriented Senior Director Privacy Counsel to help us build scalable, effective privacy programs that reflect our values and support our global growth. As SeniorDirector Privacy Counsel, you will own and implement global privacy and data protection compliance strategy and operating model across global jurisdictions, with a primary focus on data breach readiness and response, EU regulatory obligations, and U.S. privacy compliance. You will report into the Chief Legal Officer and partner closely with Legal, InfoSec (including the CISO), Engineering Leaders (including Chief Technology and Product Officer), Compliance, and cross-functional teams to drive clarity, consistency, and accountability across all facets of data protection.This role is ideal for a privacy attorney who thrives in a fast-paced, tech-focused environment and wants to make a meaningful impact through program design, incident management, and regulatory documentation.
Job Responsibility:
Define Bumble’s global privacy strategy, operating model, and multi-year roadmap, navigating new uses of member data in AI models as well as the emerging regulatory schemes that will govern this work
Provide critical strategic legal guidance regarding privacy usage that drives both innovation and the Company’s commitment to privacy while building an efficient & scalable privacy compliance function - and partnering hands-on with leaders across the organisation
Drive scalable, cross-functional privacy compliance programs aligned with global frameworks including GDPR, UK DPA, CCPA/CPRA, and other U.S. state-level privacy laws, creating a data governance framework and implementing a data governance structure
Provide regular privacy reporting and presentations to the Audit Committee and senior leadership, clearly communicating risk, readiness, trends, and decisions in a way that supports strong governance
Partner closely with an external Data Protection Officer (DPO) and internal senior leaders to navigate EU and UK obligations, US privacy frameworks, and evolving regulatory expectations, negotiating solutions that preserve relationships and outcomes
Lead Bumble’s privacy-related cyber incident and data breach response program end-to-end in close partnership with Information Security—owning readiness and investigation/triage protocols related to privacy, making notification and regulatory reporting decisions across jurisdictions, coordinating regulator engagement, and driving post-incident remediation and lessons learned—serving as the senior escalation point for high-severity matters
Own and maintain core GDPR compliance documentation, including Records of Processing Activities (ROPA), Data Protection Impact Assessments (DPIAs), and Lawful Basis assessments and draft and negotiate Data Processing Agreements
Partner closely with InfoSec, Product, and Engineering teams to ensure security safeguards, privacy-by-design, and clear roles and responsibilities in incident preparedness
Partner closely with the member support function to respond to requests from members for access to or deletion of their data, and assist on (i) regulatory investigations from regulators in the US, UK and EU
and (ii) member claims in civil courts, in relation to Bumble’s response to members’ requests
Collaborate with internal Legal colleagues to ensure privacy compliance is integrated into wider compliance and regulatory strategies (e.g., marketing, consumer protection, international transfers), and advise other teams in the business on how to perform their functions in a manner that complies with data protection laws (e.g. marketing, advertising, communications and HR teams)
Develop and lead a talented privacy advisor who plays a key role in ensuring the protection of our member’s data
Build and deliver privacy policies, playbooks, templates, and training materials that promote awareness and enable operational consistency
Stay abreast of privacy and data security trends and regulatory changes, and assess their practical impact on Bumble’s global operations
Promote a member-first approach to privacy that aligns with Bumble’s values and business priorities.
Requirements:
J.D. degree and active bar membership in good standing
12+ years of relevant privacy and data protection experience, including in-house counsel roles with U.S.-based global companies
Deep understanding of global privacy regulations, including GDPR, UK GDPR, CCPA/CPRA, biometric specific laws and other U.S. privacy and data security frameworks
Demonstrated experience leading complex data breach and incident response programs, including coordination with InfoSec, legal assessments, and notification requirements
Hands-on experience owning and managing ROPA, DPIAs, and other GDPR compliance artifacts
Practical, risk-based mindset and strong organizational skills—comfortable building scalable systems that reduce redundancy and ensure compliance
Ability to distill complex regulatory requirements into clear, actionable advice tailored for business partners
Experience building teams and/or leading through senior cross-functional partners — setting standards, coaching, and creating clarity across ambiguous, high-impact work
Strong interpersonal and communication skills with a proven track record of influencing and collaborating across diverse global teams, including the ability to present to and advise senior leaders across the organization and the members of the Audit Committee
Deep alignment with Bumble’s mission, values, and global focus
Preference for New York City or Austin, TX candidates but open to candidates in the New York region (D.C., CT, Boston) who are willing to travel, as much as quarterly, to the NY office
This role will also require periodic travel to our office in London and to our other Austin office, if based in NY.