Director, Legal

Arctic Wolf Networks, Inc.; Minnesota; Hybrid; USD 186,000 - 302,000; Full time

Job summary

Arctic Wolf is seeking an experienced privacy attorney to serve as Director, Privacy, and own our global privacy program. You will partner with Product, Engineering, Security, IT, People, and Legal to shape governance and ensure compliant operations across the US, Canada, Europe, and beyond.

The role requires J.D. from an accredited law school, 7+ years of privacy experience, and strong drafting and negotiation skills to manage DPAs, SCCs, and regulatory inquiries.

Qualifications

• J.D. from an accredited law school and active U.S. state bar membership.
• Seven+ years of relevant legal experience including privacy and data protection.
• Strong knowledge of GDPR, CCPA/CPRA and global privacy frameworks.

Responsibilities

• Own day-to-day operation of the global privacy program and ensure GDPR/CCPA compliance.
• Draft and maintain privacy policies, notices, and data processing records.
• Conduct privacy reviews and DPIAs and embed privacy by design in products.
• Serve as primary privacy contact for incidents and regulatory inquiries.
• Negotiate privacy terms in commercial agreements and manage DPAs and SCCs.
• Handle data subject requests and build playbooks for teams to act quickly.

Skills

Privacy law

Regulatory compliance

Contract negotiation

Data privacy governance

Risk management

Stakeholder collaboration

Education

J.D. from an accredited law school

Active U.S. state bar admission

Job description

Arctic Wolf is seeking an experienced privacy attorney to serve as Director, Privacy and take day-to-day ownership of our global privacy program. Reporting to the VP of Commercial & Privacy, you will be the hands‑on owner of privacy compliance across our channel‑led, SaaS‑enabled cybersecurity business serving more than 12,000 customers worldwide. This is a builder role for a pragmatic lawyer who translates evolving global privacy and data protection requirements into scalable processes. You will partner with Product and Engineering, Security, IT, People, Legal and other organizations to help shape privacy governance.

Responsibilities

• Own day-to-day operation of the global privacy program, including compliance with GDPR, CCPA/CPRA, other US state privacy laws, and other applicable regimes across the US, Canada, Europe, India and Australia, and monitor new laws and regulatory guidance to stay compliant ahead of effective dates.
• Draft, maintain, and improve privacy policies, notices, standards, records of processing, data maps, retention schedules, and internal guidance.
• Conduct and document data protection impact assessments, transfer impact assessments, and privacy reviews.
• Partner with our product counsel to embed privacy by design into our product development.
• Partner with Product and Engineering on data minimization, purpose limitation, transparency, access, sharing, and retention, and reviewing technical specifications and data flows with privacy implications.
• Serve as a primary privacy contact for security and privacy incidents, working with Security Operations and outside counsel to assess notification obligations and manage regulator and customer inquiries.
• Serve as an escalation point for commercial legal and sourcing teams on privacy terms in customer, partner, reseller and vendor agreements, and maintain data processing agreements, subprocessor disclosures, standard contractual clauses, and business associate agreements.
• Handle data subject requests, privacy escalations, and customer and prospect privacy diligence, and build playbooks, templates, and training so other teams can move quickly while staying compliant.
• Manage outside counsel and privacy tooling vendors, including scope, budget, and quality of work product.

Qualifications

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.
• Seven or more years of relevant legal experience, including substantial privacy and data protection work and meaningful in-house experience at a technology company.
• Deep working knowledge of GDPR, CCPA/CPRA, and other major global privacy frameworks, plus the emerging AI regulatory landscape.
• Demonstrated experience operating a privacy program, not only advising on one, including assessments, records of processing, data subject requests, vendor review, and advising Product and Engineering on privacy by design and technical data flows.
• Experience supporting privacy and security incident response, including breach analysis and regulator inquiries.
• Strong drafting and negotiation skills covering data processing agreements, standard contractual clauses, and privacy and security terms in commercial contracts.
• Excellent business judgment and a risk-based, solutions-oriented approach, with a demonstrated AI-first mindset, comfort with ambiguity, and a strong sense of ownership in a fast-moving environment.
• International Association of Privacy Professionals (IAPP) certification such as CIPP/US, CIPP/E, CIPM, or CIPT is strongly preferred.
• Experience at a cybersecurity, security software, or managed security provider, including security telemetry, log data, and threat intelligence data flows, and channel/MSP data-sharing arrangements.
• Experience with public sector customer privacy requirements across state, local, and education markets in the US, Canada, Australia, and Europe is preferred.

At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2025), Best Places to Work – USA (2021-2025), Great Place to Work – Canada (2021-2024), Great Place to Work – UK (2024-2026), and Kununu Top Company – Germany (2024-2026). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over 10,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolf remains the most trusted name in the industry.

Our Values

We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people's and organizations' sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here.

All wolves receive compelling compensation and benefits packages, including:

• Equity for all employees
• Flexible time off and paid volunteer days
• RRSP and 401k match
• Training and career development programs
• Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
• Robust Employee Assistance Program (EAP) with mental health services
• Fertility support and paid parental leave

Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.

Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.

Security Requirements

Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes, and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).

Background checks are required for this position.

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”).

Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.

The base salary range for this job family is 186,000 to 302,000 USD annually. This range reflects the base pay the company reasonably expects to offer for this position, aligned to the broader job family base pay structure. Actual base pay may vary based on skills, experience, and location, including job family level. In addition to base pay, Arctic Wolf offers variable incentive compensation, new hire equity grants, and a comprehensive benefits package.

If you require a reasonable accommodation for any part of the application or hiring process, you may make a request by calling the Arctic Wolf general contact number at 1-888-272-8429 and asking to speak to Recruiting, or by emailing [e-mail].