Director, Product and Privacy

Jobgether; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Comprehensive Healthcare (medical, den

Dental and vision benefits

Life insurance

Short- and long-term disability

Paid parental leave

401(k) plan

On-site gym in Utah

On-site childcare center in Utah

Job summary

Jobgether is seeking a senior in-house counsel focused on privacy and AI governance. You will partner with product, security, and engineering teams to sculpt compliant product strategies and deployments across US markets.

You will advise on regulatory frameworks, negotiate key partner agreements, and build scalable privacy and AI review processes to ensure responsible product development while safeguarding confidential information.

Qualifications

• J.D. degree with strong academic credentials.
• Bar admission in a relevant state or eligibility for in-house counsel.
• At least 8 years of legal experience, with 5+ years in-house at a tech company.

Responsibilities

• Partner with Product, Engineering, AI, Security, Marketing, Partnerships, and Legal teams to guide from design to launch and monitoring.
• Advise on product compliance for AI, privacy, data rights, IP, consumer protection, and regulatory requirements.
• Negotiate and review agreements with AI providers, data partners, and integration partners, including DPAs and BAAs.
• Identify legal/regulatory risks in product design and translate into actionable requirements.
• Develop scalable product privacy and AI review processes with playbooks and escalation paths.
• Monitor evolving privacy and AI regulations and translate into product improvements.
• Lead cross-functional privacy initiatives including data mapping, retention, and tracking technologies.
• Collaborate with Security on incident response and privacy assessments.

Skills

Regulatory compliance

AI governance

Privacy program development

Cross-functional collaboration

Legal risk assessment

Education

Juris Doctor (J.D.)

Bar admission or in-house counsel eligibility

Job description

Accountabilities:

• Partner with Product, Engineering, AI, Security, Marketing, Partnerships, and Legal teams to understand product strategies, roadmaps, and initiatives, providing guidance from early design through launch, deployment, and ongoing monitoring.
• Advise on product compliance matters involving artificial intelligence, privacy, data rights, intellectual property, consumer protection, and applicable regulatory requirements.
• Structure, negotiate, and review agreements with AI providers, data partners, and integration partners, including product terms, data processing agreements, and business associate agreements.
• Guide product design and modifications by identifying legal and regulatory risks, recommending mitigation strategies, reviewing user experiences and disclosures, and translating legal guidance into implementable product requirements.
• Develop and operationalize scalable product, privacy, and AI review processes, including impact assessments, launch criteria, playbooks, escalation paths, and compliance controls.
• Monitor evolving privacy and AI regulations, conduct gap assessments, and translate new requirements into prioritized product and operational improvements.
• Lead cross-functional privacy initiatives involving data mapping, permitted data uses, data retention and deletion, and tracking technologies.
• Collaborate with Security on incident response and the privacy aspects of compliance assessments and due diligence reviews.
• Establish AI governance practices for customer-facing AI agents and internal AI applications, covering data sourcing and usage rights, model fine-tuning and evaluation, third-party model terms, output ownership, and safeguards against inaccurate outputs.
• Advise on AI agent permissions, customer configurations, disclosures, human oversight, escalation mechanisms, auditability, and the allocation of responsibilities among the organization, model providers, integration partners, and customers.
• Support healthcare product development by advising on HIPAA privacy and security requirements, business associate agreements, sensitive health data, electronic medical record integrations, access controls, and patient communications.
• Counsel on automotive and home services workflows, including CRM and dealer management integrations, lead sourcing and re-engagement, appointment booking, service scheduling, and representations concerning pricing, financing, and services.
• Assess sector-specific requirements, including the Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), payments regulations, and other applicable obligations based on product features and data use.
• Advise on voice, messaging, and marketing compliance, including the Telephone Consumer Protection Act (TCPA), telemarketing and do-not-call rules, consent and opt-out mechanisms, call recording and transcription, and AI-generated voice.
• Review product claims and customer-facing guidance to ensure accurate representations of product capabilities, limitations, and customer responsibilities.
• Provide legal guidance on payments and fintech products, including consumer disclosures, fraud, chargebacks, financial services requirements, and payment network rules.
• Partner with Product and Finance to clarify and allocate compliance responsibilities among the organization, customers, and financial partners.
• Use AI tools thoughtfully in legal work to improve efficiency and quality while verifying outputs and protecting confidential information.

Requirements

• Juris Doctor (J.D.) degree, strong academic credentials, and a demonstrated record of legal success.
• Membership in a relevant state bar or eligibility to register as Registered In-House Counsel.
• At least 8 years of legal experience, including a minimum of 5 years in an in-house role, preferably within a high-growth technology company.
• Experience advising product teams on compliance with regulatory frameworks applicable to U.S. and global telecommunications.
• Familiarity with regulations affecting other industries and markets, particularly healthcare, automotive, and home services.
• Experience advising on risk mitigation for technology platforms, especially AI, payments, messaging, and telecommunications products.
• A recognized privacy certification, such as CIPP/US, CIPP/E, CIPM, or CIPT.
• Strong knowledge of privacy and data protection laws, including CCPA, CPRA, GDPR, TCPA, and other applicable U.S. state and federal privacy, data security, and international data protection requirements.
• Ability to identify emerging legal issues, think strategically, and develop sustainable, long-term solutions.
• Proven ability to manage multiple assignments simultaneously and lead complex projects through successful completion.
• Excellent written and verbal communication skills, with a strong customer-focused approach.
• Strong interpersonal, presentation, and facilitation skills, with the ability to collaborate effectively across teams and navigate complex corporate environments.
• Demonstrated ability to use AI tools responsibly in legal work, validate their outputs, safeguard confidential information, and improve the speed and quality of legal advice.

Benefits

• Comprehensive healthcare: Medical, dental, and vision benefits.
• Insurance coverage: Life insurance and short- and long-term disability coverage.
• Paid parental leave: Support for employees and their families.
• Fertility benefits: Access to fertility-related support.
• Generous time off: Generous vacation allowance and three four-day summer holiday weekends.
• Retirement savings: Access to a 401(k) plan.
• Company culture: An open and transparent working environment.
• Company merchandise: Two annual merchandise and apparel distributions.
• Fitness facilities: Access to an on-site headquarters gym in Utah, with professional coaches and fitness classes.
• Childcare support: An on-site childcare center at the Utah headquarters, subsidized for employees.