Senior Privacy Counsel

Strength in Trust 

OneTrust’s mission is to enable organizations to use data and AI responsibly. Our platform simplifies the collection of data with consent and preferences, automates the governance of data with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and activates the responsible use of data by applying and enforcing data policies across the entire data estate and lifecycle. OneTrust supports seamless collaboration between data teams and risk teams to drive rapid and trusted innovation. Recognized as a market pioneer and leader, OneTrust boasts over 300 patents and serves more than 14,000 customers globally, ranging from industry giants to small businesses.

The Challenge

OneTrust is the trust intelligence cloud platform organizations use to transform trust into a competitive advantage. Our platform connects privacy, GRC, ethics, and ESG teams, data, and processes—so companies big and small can collaborate seamlessly and put trust at the center of their operations and culture.

We’re looking for a Senior Privacy Counsel to join our global legal team. You’ll provide practical, business-minded legal advice and strategic guidance on data protection and privacy matters. You’ll work cross-functionally with teams across the business to operationalize privacy by design, maintain compliance with evolving global regulations, and serve as a thought partner to our product and business leaders.

Your Mission

• Advising senior leadership and key stakeholders on the development and strategic direction of our global privacy and data protection program

• Collaborating across internal teams to embed privacy best practices and regulatory compliance into product development, business operations, and customer offerings

• Serving as “Customer 0” by providing feedback on our internal use of OneTrust software and partnering with product and engineering to shape our platform with privacy-first thinking

• Designing and implementing strategies for data lifecycle management—including collection, storage, processing, sharing, and disposal—aligned with GDPR, CCPA, ISO 27701, and other global standards

• Supporting product and engineering teams with legal guidance on fairness, transparency, accountability, and responsible data use

• Monitoring and advising on global regulatory trends and changes, evaluating their impact on OneTrust’s business and offerings

• Managing and responding to data subject rights requests, breach investigations, regulatory inquiries, and other privacy-related governance matters

Some of the example projects that you will be involved in are:

• Providing legal privacy guidance and knowledgeable support to the business on projects involving Privacy Impact Assessments, Privacy by Design Assessments, Vendor and/or Transfer Impact Assessments.
• Oversight of privacy rights management workstream and providing advice to the business regarding complex privacy requests.
• Advising on business projects involving cookies and tracking technologies, use of AI and other innovative technologies.
• Supporting the company projects of automated data mapping and data governance and advising on further project priorities and strategy involving personal data management within the privacy program.
• Investigating and advising on potential privacy issues related to governance and external reporting, such as data breaches, data subject requests, regulatory inquiries, and litigation.

You Are

• A Juris Doctor degree or equivalent (LLM) from an accredited law school
• At least 5 years of experience in privacy law, data protection, or a similar role
• A solid understanding of the EU GDPR, UK GDPR, California CCPA and key US & Canada Privacy laws. Familiarity with NIST Privacy Framework and ISO 27701, as well as other relevant frameworks, standards, laws, and regulations.
• A knowledge and strong interest in (personal) data governance, algorithms, databases, web technologies, cloud computing, big data, artificial intelligence, etc.
• A familiarity with privacy-enhancing technologies (PETs).
• A certification in privacy or data protection, such as CIPP/E, CIPM, CIPT, etc., or willingness to obtain one.
• Excellent analytical, problem-solving, communication, leadership, and interpersonal skills
• A passion for privacy, automation and a commitment to ethical data use
• Ability and willingness to travel (10%-20%)

Extra Awesome

• Fluency in more than one language preferred.
• Experience with security and/or ethics that will allow us to work better with our