About this role
Managing annual updates to privacy documentation, handling legal reviews for privacy and AI rights requests, and collaborating on cross-functional data protection matters form the core of daily operations for this role. The incoming legal counsel will partner closely with the Associate General Counsel for Privacy, AI, and Digital Governance to build practical, scalable programs that navigate evolving regulatory requirements while supporting AI-first objectives.
BambooHR expands its focus on privacy and responsible AI practices to foster trust and transparency across its people intelligence platform. The person in this position will translate legal regulations into actionable business practices, manage risk assessments, and support governance guardrails for marketing technologies and website operations. Ideal candidates bring a strong background in data protection and a collaborative mindset suited for a hybrid office environment in Utah.
What you will do
- Partner with the Associate General Counsel to execute legal, operational, and transactional program activities for privacy and AI governance.
- Manage annual updates to privacy documentation such as notices, customer contract addendums, policies, and templates to keep materials audit-ready.
- Handle legal review and escalations for privacy and AI rights requests while maintaining defensible records of program activities.
- Collaborate with cross-functional stakeholders on incident response, risk assessments, and control gap remediation.
- Support privacy program operations regarding marketing technologies, website operations, cookie consent management, and data collection practices.
- Assist in identifying legal considerations to enable AI-first objectives while building necessary governance guardrails.
- Support adherence to GDPR, CCPA/CPRA, U.S. state privacy laws, and emerging AI regulatory frameworks.
What you need
- Hold a Juris Doctor (J.D.) degree or possess equivalent legal experience.
- Bring 3 to 5 years of experience supporting privacy, data protection, AI governance, cybersecurity, or technology-related functions.
- Demonstrate working knowledge of privacy laws and regulations including GDPR, CCPA/CPRA, HIPAA, and GLBA.
- Show a strong interest in AI governance, risk management, or emerging regulatory frameworks.
- Possess the ability to interpret legal requirements and translate them into practical business solutions.
- Exhibit strong project management, organizational, and analytical problem-solving skills.
Nice to have
- Experience supporting privacy programs within a SaaS or high-growth technology company
- Experience conducting privacy impact assessments, AI risk assessments, or vendor reviews
- Experience managing transactional privacy operations including policy development, training, and vendor risk management
- Familiarity with AI governance frameworks like the NIST AI Risk Management Framework or ISO standards
- In-house experience supporting privacy, security, or responsible AI initiatives
Benefits
- Comprehensive health, life, and disability insurance
- 4 weeks of vacation and 12 company holidays, plus parental leave and volunteer time off
- 401k plans with up to 6% company match
- $2000 Paid-Paid Vacation bonus
- Employee Assistance Program through Headspace
Questions candidates ask
What is the work mode and location for this role?
This is a Utah-based hybrid position which will require some regular in-office days each week. Additionally, employment with BambooHR is contingent on passing both a background and credit check.
What kind of experience is required for applicants?
Candidates need a Juris Doctor degree or equivalent legal experience, alongside 3 to 5 years of experience supporting privacy, data protection, AI governance, cybersecurity, or technology-related functions.
How does the company use AI in the hiring process?
The hiring process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability to ensure all final decisions are human-made.