Remote Privacy Counsel: AI‑Driven DPIAs

TRM Labs Inc.; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

TRM Labs is seeking a Legal Counsel, Privacy to own the privacy program for the Orion platform as it expands into new jurisdictions. You will apply GDPR and US privacy laws, draft DPIAs with AI assistance, and partner with Engineering to resolve data-flow and retention questions.

Lead DSAR responses, design SCCs and transfer mechanisms for international customers, and provide practical privacy guidance to leadership in a fast-moving, remote-first environment.

Qualifications

• 4+ years of privacy and data‑protection legal experience applying GDPR and US state privacy laws to a technology product.
• Active US bar admission; JD from an ABA-accredited law school.
• Proven AI fluency: use Claude, Gemini, or equivalent tools in daily workflow for AI-assisted privacy processes.

Responsibilities

• Own privacy program and DPIA workflow for Orion platform expansions, aligning with business needs.
• Embed privacy-by-design in the development lifecycle with Engineering to resolve data-flow and retention questions.
• Lead data subject rights (DSAR) responses in coordination with Engineering and Customer Success.
• Build and maintain core artifacts (records of processing, DPIA templates, breach-response playbooks) with AI-assisted workflows.
• Review data processing agreements with AI and finalize positions to accelerate DPAs with customers and vendors.
• Design lawful cross-border transfer mechanisms (SCCs, transfer impact assessments) for international customers.
• Stand up a self-service privacy-review intake with AI triage for routine questions.
• Support CLO and AGC with business-ready guidance on privacy risk.

Skills

Privacy law

AI fluency

Product/Engineering counsel

Cross-border transfers

Education

Juris Doctor (JD)

Job description

TRM Labs is seeking a Legal Counsel, Privacy to own the privacy program for the Orion platform as it expands into new jurisdictions. You will apply GDPR and US privacy laws, draft DPIAs with AI assistance, and partner with Engineering to resolve data-flow and retention questions.

Lead DSAR responses, design SCCs and transfer mechanisms for international customers, and provide practical privacy guidance to leadership in a fast-moving, remote-first environment.