Director, Product and Privacy

Jobgether; United States; On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical, dental, and vision benefits

Life and disability insurance

Parental leave

Fertility benefits

Generous vacation and 401(k)

On-site gym in Utah

Job summary

Jobgether is seeking a Director, Product and Privacy based in the United States to lead strategic legal counsel on product, privacy, and AI governance across multiple industries. You will work with product, engineering, security, marketing, and business teams to integrate legal considerations throughout the lifecycle of AI-powered products.

You will structure guidance, review agreements with AI/data partners, and establish scalable processes for privacy and governance while managing regulatory

Qualifications

• J.D. degree with strong academic credentials and a record of legal success.
• 8+ years of legal experience, including 5+ years in-house at a high-growth tech company.
• Experience advising product teams on compliance for U.S. and global telecoms.
• Familiarity with healthcare, automotive, and home services sectors.
• Experience mitigating risk for AI, payments, messaging, and telecom products.
• Privacy certifications such as CIPP/US, CIPP/E, CIPM, or CIPT.

Responsibilities

• Provide strategic legal counsel on product development, privacy, AI governance, and compliance.
• Guide product design by identifying legal/regulatory risks and translate into requirements.
• Structure and negotiate agreements with AI providers and data partners.
• Develop scalable privacy and AI review processes and run gap assessments.
• Lead cross-functional privacy initiatives, data mapping, retention, and data uses.
• Advise on HIPAA, GLBA, FCRA, TCPA, and other relevant regulatory obligations.
• Collaborate with Security on incident response and due diligence reviews.
• Ensure accurate product claims and customer-facing disclosures.

Skills

Communication skills

Interpersonal skills

Presentation skills

Facilitation skills

Cross-functional collaboration

Project management

Education

Juris Doctor (J.D.)

Bar admission / In-house counsel eligibility

Privacy certifications (CIPP/US, CIPP/E, CIPM, CIPT)

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director, Product and Privacy based in the United States. We are seeking an experienced product and privacy lawyer to guide the development and deployment of innovative AI-powered products across multiple industries. In this senior individual contributor role, you will work closely with Product, Engineering, Security, Marketing, and business teams to integrate legal and privacy considerations throughout the product lifecycle. You will lead practical privacy and AI governance initiatives, translating complex regulatory requirements into scalable processes and actionable product guidance. Your work will span healthcare, automotive, home services, messaging, and payments, helping teams innovate responsibly while managing legal and regulatory risks. Reporting to the General Counsel, you will have significant ownership and direct influence on product strategy and business decisions. This opportunity is ideal for a strategic legal professional who combines deep technical and regulatory knowledge with a pragmatic, collaborative approach to emerging technologies.

Accountabilities

You will provide strategic legal counsel on product development, privacy, AI governance, and industry-specific compliance, ensuring that innovative products are designed and deployed responsibly across applicable markets.

• Partner with Product, Engineering, AI, Security, Marketing, Partnerships, and Legal teams to understand product strategies, roadmaps, and initiatives, providing guidance from early design through launch, deployment, and ongoing monitoring.
• Advise on product compliance matters involving artificial intelligence, privacy, data rights, intellectual property, consumer protection, and applicable regulatory requirements.
• Structure, negotiate, and review agreements with AI providers, data partners, and integration partners, including product terms, data processing agreements, and business associate agreements.
• Guide product design and modifications by identifying legal and regulatory risks, recommending mitigation strategies, reviewing user experiences and disclosures, and translating legal guidance into implementable product requirements.
• Develop and operationalize scalable product, privacy, and AI review processes, including impact assessments, launch criteria, playbooks, escalation paths, and compliance controls.
• Monitor evolving privacy and AI regulations, conduct gap assessments, and translate new requirements into prioritized product and operational improvements.
• Lead cross-functional privacy initiatives involving data mapping, permitted data uses, data retention and deletion, and tracking technologies.
• Collaborate with Security on incident response and the privacy aspects of compliance assessments and due diligence reviews.
• Establish AI governance practices for customer-facing AI agents and internal AI applications, covering data sourcing and usage rights, model fine-tuning and evaluation, third-party model terms, output ownership, and safeguards against inaccurate outputs.
• Advise on AI agent permissions, customer configurations, disclosures, human oversight, escalation mechanisms, auditability, and the allocation of responsibilities among the organization, model providers, integration partners, and customers.
• Support healthcare product development by advising on HIPAA privacy and security requirements, business associate agreements, sensitive health data, electronic medical record integrations, access controls, and patient communications.
• Counsel on automotive and home services workflows, including CRM and dealer management integrations, lead sourcing and re-engagement, appointment booking, service scheduling, and representations concerning pricing, financing, and services.
• Assess sector-specific requirements, including the Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), payments regulations, and other applicable obligations based on product features and data use.
• Advise on voice, messaging, and marketing compliance, including the Telephone Consumer Protection Act (TCPA), telemarketing and do-not-call rules, consent and opt-out mechanisms, call recording and transcription, and AI-generated voice.
• Review product claims and customer-facing guidance to ensure accurate representations of product capabilities, limitations, and customer responsibilities.
• Provide legal guidance on payments and fintech products, including consumer disclosures, fraud, chargebacks, financial services requirements, and payment network rules.
• Partner with Product and Finance to clarify and allocate compliance responsibilities among the organization, customers, and financial partners.
• Use AI tools thoughtfully in legal work to improve efficiency and quality while verifying outputs and protecting confidential information.

Requirements

The ideal candidate is a seasoned technology lawyer with substantial in-house experience, strong privacy credentials, and the ability to translate complex legal issues into practical guidance that supports responsible product innovation.

• Juris Doctor (J.D.) degree, strong academic credentials, and a demonstrated record of legal success.
• Membership in a relevant state bar or eligibility to register as Registered In-House Counsel.
• At least 8 years of legal experience, including a minimum of 5 years in an in-house role, preferably within a high-growth technology company.
• Experience advising product teams on compliance with regulatory frameworks applicable to U.S. and global telecommunications.
• Familiarity with regulations affecting other industries and markets, particularly healthcare, automotive, and home services.
• Experience advising on risk mitigation for technology platforms, especially AI, payments, messaging, and telecommunications products.
• A recognized privacy certification, such as "CIPP/US", "CIPP/E", "CIPM", or "CIPT".
• Strong knowledge of privacy and data protection laws, including CCPA, CPRA, GDPR, TCPA, and other applicable U.S. state and federal privacy, data security, and international data protection requirements.
• Ability to identify emerging legal issues, think strategically, and develop sustainable, long-term solutions.
• Proven ability to manage multiple assignments simultaneously and lead complex projects through successful completion.
• Excellent written and verbal communication skills, with a strong customer-focused approach.
• Strong interpersonal, presentation, and facilitation skills, with the ability to collaborate effectively across teams and navigate complex corporate environments.
• Demonstrated ability to use AI tools responsibly in legal work, validate their outputs, safeguard confidential information, and improve the speed and quality of legal advice.

Benefits

• Comprehensive healthcare: Medical, dental, and vision benefits.
• Insurance coverage: Life insurance and short- and long-term disability coverage.
• Paid parental leave: Support for employees and their families.
• Fertility benefits: Access to fertility-related support.
• Generous time off: Generous vacation allowance and three four-day summer holiday weekends.
• Retirement savings: Access to a 401(k) plan.
• Company culture: An open and transparent working environment.
• Company merchandise: Two annual merchandise and apparel distributions.
• Fitness facilities: Access to an on-site headquarters gym in Utah, with professional coaches and fitness classes.
• Childcare support: An on-site childcare center at the Utah headquarters, subsidized for employees.