Director, Legal

Arctic Wolf Networks; Minnesota; On-site; USD 186,000 - 302,000; Full time

Benefits offered by this job

Equity for all employees

Flexible time off

RRSP/401k match

Training and career development

Private health benefits

Job summary

Arctic Wolf seeks an experienced privacy attorney to serve as Director, Privacy and own the global privacy program. You will partner with Product, Engineering, Security, IT, People, and Legal to shape governance and privacy strategy across the US, Canada, Europe, India, and Australia.

You will lead day-to-day operations, develop privacy policies, manage DPIAs and reviews, and drive privacy by design in product development.

Qualifications

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.
• Seven or more years of relevant legal experience, including substantial privacy and data protection work and in-house experience at a technology company.
• Deep working knowledge of GDPR, CCPA/CPRA, and other major global privacy frameworks, plus the AI regulatory landscape.
• Experience operating a privacy program including assessments, data maps, and vendor reviews.
• Experience supporting privacy and security incident response and regulator inquiries.

Responsibilities

• Own day-to-day operation of the global privacy program, including GDPR/CCPA/CPRA compliance and monitoring laws across regions.
• Draft, maintain, and improve privacy policies, notices, standards, records of processing, and data maps.
• Conduct data protection impact assessments, transfer impact assessments, and privacy reviews.
• Embed privacy by design into product development and review data flows with privacy implications.
• Serve as privacy contact for incidents and manage regulator and customer inquiries.
• Escalate privacy terms in commercial contracts and manage data processing agreements.
• Handle data subject requests and build playbooks, templates, and training.
• Manage outside counsel and privacy tooling vendors and budgets.

Skills

Privacy program management

GDPR/CCPA knowledge

Drafting & negotiation

Privacy by design

Regulatory compliance

Education

J.D. from a law school

Job description

Arctic Wolf is seeking an experienced privacy attorney to serve as Director, Privacy and take day-to-day ownership of our global privacy program. Reporting to the VP of Commercial & Privacy, you will be the hands-on owner of privacy compliance across our channel-led, SaaS-enabled cybersecurity business serving more than 12,000 customers worldwide.

This is a builder role for a pragmatic lawyer who translates evolving global privacy and data protection requirements into scalable processes. You will partner with Product and Engineering, Security, IT, People, Legal and other organizations to help shape privacy governance.

Responsibilities

• Own day-to-day operation of the global privacy program, including compliance with GDPR, CCPA/CPRA, other US state privacy laws, and other applicable regimes across the US, Canada, Europe, India and Australia, and monitor new laws and regulatory guidance to stay compliant ahead of effective dates.

• Draft, maintain, and improve privacy policies, notices, standards, records of processing, data maps, retention schedules, and internal guidance.

• Conduct and document data protection impact assessments, transfer impact assessments, and privacy reviews.

• Partner with our product counsel to embed privacy by design into our product development. Partner with Product and Engineering on data minimization, purpose limitation, transparency, access, sharing, and retention, and reviewing technical specifications and data flows with privacy implications.

• Serve as a primary privacy contact for security and privacy incidents, working with Security Operations and outside counsel to assess notification obligations and manage regulator and customer inquiries.

• Serve as an escalation point for commercial legal and sourcing teams on privacy terms in customer, partner, reseller and vendor agreements, and maintain data processing agreements, subprocessor disclosures, standard contractual clauses, and business associate agreements.

• Handle data subject requests, privacy escalations, and customer and prospect privacy diligence, and build playbooks, templates, and training so other teams can move quickly while staying compliant.

• Manage outside counsel and privacy tooling vendors, including scope, budget, and quality of work product.

Qualifications

• J.D. from an accredited law school and active membership in good standing with at least one U.S. state bar.

• Seven or more years of relevant legal experience, including substantial privacy and data protection work and meaningful in-house experience at a technology company.

• Deep working knowledge of GDPR, CCPA/CPRA, and other major global privacy frameworks, plus the emerging AI regulatory landscape.

• Demonstrated experience operating a privacy program, not only advising on one, including assessments, records of processing, data subject requests, vendor review, and advising Product and Engineering on privacy by design and technical data flows.

• Experience supporting privacy and security incident response, including breach analysis and regulator inquiries.

• Strong drafting and negotiation skills covering data processing agreements, standard contractual clauses, and privacy and security terms in commercial contracts.

• Excellent business judgment and a risk-based, solutions-oriented approach, with a demonstrated AI-first mindset, comfort with ambiguity, and a strong sense of ownership in a fast-moving environment.

• International Association of Privacy Professionals (IAPP) certification such as CIPP/US, CIPP/E, CIPM, or CIPT is strongly preferred.

• Experience at a cybersecurity, security software, or managed security provider, including security telemetry, log data, and threat intelligence data flows, and channel/MSP data-sharing arrangements.

• Experience with public sector customer privacy requirements across state, local, and education markets in the US, Canada, Australia, and Europe is preferred.

About Arctic Wolf

At Arctic Wolf, we foster a collaborative and inclusive work environment that thrives on diversity of thought, background, and culture. This is reflected in our multiple awards, including Top Workplace USA (2021-2025), Best Places to Work – USA (2021-2025), Great Place to Work – Canada (2021-2024), Great Place to Work – UK (2024-2026), andKununuTop Company – Germany (2024-2026). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction, with over10,000 customers worldwide and more than 2,000 channel partners globally. As we continue to expand globally and enhance our technology, Arctic Wolfremainsthe most trusted name in the industry.

Our Values

Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity andinclusion, andtruly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protectingpeople’sand organizations’ sensitive data andseekingto end cyber risk— we get to work in an industry that is fundamental to the greater good.

We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unityhere.

We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.

All wolves receive compelling compensation and benefits packages, including:

• Equity for all employees

• Flexible time off and paid volunteer days

• RRSP and 401k match

• Training and career development programs

• Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services

• Robust Employee Assistance Program (EAP) with mental health services

• Fertility support and paid parental leave

• Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make ourentireexperience asaccessible as possible and provideaccommodationsasrequiredfor candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodationby emailing [e-mail] Pageto learn more about our application process.

Security Requirements

Conducts duties and responsibilitiesin accordance withAWN’s Information Security policies, standards,processes,and controls to protect the confidentiality,integrityand availability of AWN business information (in accordance withour employee handbook and corporate policies).

Background checks arerequiredfor this position.

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”).Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.

The base salary range for this job family is 186,000 to 302,000 USD annually. This range reflects the base pay the company reasonably expects to offer for this position, aligned to the broader job family base pay structure. Actual base pay may vary based on skills, experience, and location, including job family level. In addition to base pay, Arctic Wolf offers variable incentive compensation, new hire equity grants, and a comprehensive benefits package.