Legal Counsel, Privacy, AI, & Digital Governance

BambooHR; Draper (UT); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Disability insurance

Paid time off

Job summary

BambooHR is seeking an Associate Legal Counsel focused on privacy, AI, and digital governance from a Utah-based hybrid role. You will collaborate with the General Counsel and cross-functional teams to advance regulator-ready privacy and AI governance programs.

You will translate complex laws into practical policies, support incident response and risk assessments, and help develop governance controls to sustain responsible AI practices.

Qualifications

• Juris Doctor (J.D.) degree required.
• Experience in privacy, data protection, AI governance, or related functions.

Responsibilities

• Support privacy and AI governance initiatives under AGC guidance.
• Translate legal and regulatory requirements into practical business policies.
• Develop and maintain privacy program documents, notices, and templates.
• Collaborate with cross-functional teams on incident response, risk assessments, and controls.
• Assist in identifying privacy and AI-related legal considerations and governance guardrails.

Skills

Privacy governance

AI governance

Regulatory compliance

Cross-functional

Regulatory research

Education

Juris Doctor (J.D.)

Job description

Legal Counsel, Privacy, AI, & Digital Governance

Work Mode: Please Note: This is a Utah-based hybrid position which will require some regular in-office days each week. Additionally, employment with BambooHR is contingent on passing both a background and credit check.

AI at BambooHR
At BambooHR, we’re all about setting people free to do great work, and we believe AI is a powerful partner in that mission. We’re leaning into intelligent tools to streamline our workflows, giving us more time for high-impact innovation. We look for curious, forward-thinking people who are ready to explore how AI can elevate their work and help us reimagine the future of HR.

At BambooHR, we believe doing great work starts with having a great quality of life. That's why we're committed to creating an environment where our employees can thrive both professionally and personally.

As BambooHR continues to grow and innovate, we're expanding our focus on privacy, data protection, and responsible AI practices. We're looking for an Associate Legal Counsel who is passionate about helping organizations navigate evolving regulatory requirements while building practical, scalable programs.

In this role, you'll report to the Associate General Counsel, Privacy, AI, and Digital Governance and partner closely with cross-functional stakeholders to support BambooHR's privacy and AI governance initiatives. You'll help translate legal and regulatory requirements into actionable business practices, contribute to innovative solutions and support the development of policies, processes, and controls that promote trust, transparency, and responsible innovation.

You will:

• Partner with and support the Associate General Counsel, Privacy, AI, and Digital Governance in executing legal, operational, and transactional program activities that advance a regulator-ready privacy and AI governance program.


• Manage annual updates to privacy program documentation, including privacy notices, customer contract addendums, policies, and other templates. ensuring materials remain current, accurate, and audit-ready.


• Manage legal review and escalations for privacy and AI rights requests and support day-to-day adherence to applicable privacy regulations, maintaining organized and defensible records of program activities.


• Work with cross-functional stakeholders throughout BambooHR on a variety of AI, privacy and data protection matters — including incident response, risk assessments, and control gap remediation — with clear escalation to the AGC on matters with significant legal exposure or strategic implications.


• Assist AGC in identifying and addressing privacy and AI-related legal considerations, serving as a practical and solutions-oriented resource that enables BambooHR's AI-first objectives while building the governance guardrails needed to sustain them.


• Support adherence with GDPR, CCPA/CPRA, emerging U.S. state privacy laws, and evolving AI regulatory frameworks, proactively monitoring developments and flagging material changes that warrant AGC attention or program-level updates.


• Assist with conducting privacy and AI impact assessments and assist with risk evaluation and mitigation efforts, exercising sound judgment about when to elevate issues, propose alternatives, or seek direction from the AGC before proceeding.


• Monitor legal and regulatory developments related to privacy, data protection, and artificial intelligence, and provide practical guidance to internal stakeholders.

What You Need to Get the Job Done

• Juris Doctor (J.D.) degree or equivalent legal experience.


• 3–5 years of experience supporting privacy, data protection, AI governance, , cybersecurity or technology-related functions.


• Working knowledge of privacy laws and regulations, including GDPR, CCPA/CPRA, HIPAA, GLBA, and other emerging privacy requirements.


• A strong interest in AI governance, AI risk management, or emerging AI regulatory frameworks.


• Ability to interpret legal and regulatory requirements and translate them into practical business solutions.


• Strong project management and organizational skills with the ability to manage multiple priorities simultaneously.


• Excellent written and verbal communication skills.


• Strong attention to detail and analytical problem-solving abilities.


• Collaborative mindset and ability to work effectively across multiple business functions.

What Will Make Us REALLY Love You

• Experience supporting privacy programs within a SaaS or high-growth technology company.


• Experience conducting privacy impact assessments, AI risk assessments, or vendor reviews.


• Experience managing transactional privacy operations such as policy development, training, incident response, vendor risk management, and appropriate data use.


• Familiarity with AI governance frameworks such as the NIST AI Risk Management Framework, ISO standards, or emerging AI regulations.


• Experience partnering with cross-functional teams, such as Legal, Security, Risk, Security, and Product teams to operationalize regulatory requirements.


• In-house experience supporting privacy, security, or responsible AI initiatives.


• Passion for helping organizations build trustworthy, and responsible technology and governance practices


• Comprehensive health, life, and disability insurance


• Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life

At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective.

We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.

What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you.

BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know.

BambooHR is An Equal Opportunity Employer--M/F/D/V
Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.

For information on California Privacy Policy, click here .

Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our General Privacy Notice and California Privacy Notice for more details.

See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.